last executing test programs: 10m8.394186873s ago: executing program 3 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="dd481ea0a28dd3ad058e78c4d1f7569674787dd5402817780ac263bca36438fb7d9b33eec04d9ab3cf2cacd243c3c3be17e032145717622a30e0f26ba1882d07a2ecd8ed737e5cc833a15fabcf7022f6cafacb52b3ef8aa8ab933b635eeaeca917429a96cb61", 0x66}], 0x1}}], 0x1, 0x40010) socketpair(0xf, 0xa, 0x8, &(0x7f0000000300)) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f00000001c0)=0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m4.621686449s ago: executing program 3 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fc", 0x57}], 0x1) setresuid(0x0, 0xee01, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 10m4.205963514s ago: executing program 3 (id=28): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x260000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x8200) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x10040) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 10m3.695767356s ago: executing program 3 (id=29): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000a00)=""/135, 0x87}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m2.100106739s ago: executing program 3 (id=33): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fchdir(r1) r5 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = mmap$binder(&(0x7f00003e8000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x68) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYRES64=r0, @ANYRES16=r7, @ANYRES16=r0], 0x20) 10m0.264480138s ago: executing program 3 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x400) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x4f8, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xd, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7ff, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0x2, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x1, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x6}, {0x200, 0x9, 0x81, 0x1}, {0x7, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0x6}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0xff, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0x9}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0xe, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b900"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 9m44.393579859s ago: executing program 32 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x400) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x4f8, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xd, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7ff, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0x2, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x1, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x6}, {0x200, 0x9, 0x81, 0x1}, {0x7, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0x6}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0xff, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0x9}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0xe, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b900"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 9m10.666861433s ago: executing program 4 (id=123): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40200018}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100000101000c00000000000000000d00000808001a400000222f080008400000000408000740000080013c0004803800028005000100010000000c00034000000000000000060c00034000000000000000010c00034000000000000000f805000200dd00000020001700000000006010000000000009000018e7000000860000009f0000000094000e800c000280050001003a0000001400020000000000"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usbip_server_init(0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000400)=0x804, 0x4) close_range(r1, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x6b9d, &(0x7f0000000800)={0x0, 0x114df, 0x20000, 0xfffffffc, 0x36e, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3518, 0x35c3, 0x40a7fbea9f3f85bb, 0x0, 0x0) 9m8.58586983s ago: executing program 4 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040800001b0000000002000000400004803c0001800900010068617368000000002c00028008000340000000ff080002400000"], 0x94}}, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x4, 0x20000000, 0xffff, r2, 0x0, 0x4, 'syz0\x00', 0x0}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) fstat(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x18160cd, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030302006000000303030302c757365725f69643d3650ca668266cf2d4880a97ca5133419ca313fb6144b3476941e36785e14d0a75e5295393bb6c5036d0000000000e02966efad0840880b3526fe5ca0469981f23741f7a9ad1ffa7dc3c38a773467e5482b5206146ebce2e13ff4511cbfbae5b2e0032093fe6f25603e83445cd5b4c7098c7e34aa77999f4d2df72114c324c853348872a2995b64f20ad1a5de10e1af2d860af12b2fd899bc81956ad4d29231584d2b1188cdc921390d74fe01c1959ecc36e958387d6533ee84254bd60e95d7521ccae09e4bd18c436c96604cc0865ce78c446c66499d061528267119f70f5aceb78a64ff794e2e6db103914422029cf85036446b7278c813828195cd3a0945e7341aa0a8dd971f15317910c6048470450a96a8fa67a0484ef1bf199d935ae261cbf1ecb5deb7b0360806f696fe8a59af785c3b176068c2a21837d87c2c53dfd0b01dd0c0b45a5373f9d84316f13ee07ac2e09bc7918d99aa66aee7b8513f941474362faa53c8e29987862f8112eaec1176021b958b2a1fea292473a99e29348083dd4894e192a15a6ded3823fbe975ea04dfdf7ba856bfe178589c7492", @ANYRESDEC=0xee01, @ANYBLOB, @ANYRESDEC=r5]) socket$nl_generic(0x10, 0x3, 0x10) 9m6.826265768s ago: executing program 4 (id=131): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 9m5.781428731s ago: executing program 4 (id=133): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40600) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)}, {&(0x7f0000000300)="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", 0xff}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r0, 0x0, 0x0, 0x6, 0x7) syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 9m3.316800401s ago: executing program 4 (id=135): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)}, {&(0x7f0000000740)=""/221, 0xdd}], 0x2, &(0x7f0000000a00)=""/135, 0x87}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m2.149612079s ago: executing program 4 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 8m46.708156509s ago: executing program 33 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 33.717668706s ago: executing program 0 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 33.452479394s ago: executing program 0 (id=1632): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) eventfd(0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x5, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfadd, 0x400, 0x0, 0x1}, &(0x7f0000000340), 0x0) 33.323907404s ago: executing program 0 (id=1634): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001e80)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbee0000000000008001489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cce1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000500)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbba0000007e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe12158713ef8864796df4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e99927685000000000000", 0x9e}, {&(0x7f0000000a80)="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", 0x1b0}, {&(0x7f0000000dc0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93d56681", 0xdb}], 0x7}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="fcbed7e57e1228", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="88f64f8368bed9c93edc7eae6edf5b4ba003f7f0c0e7d03528a787bed27db89e8a4ba58af3ac9db4522ac3363efec71b8fbbcd8cb7335f69b0beef235fe0dab99375ea92d442bbe4276a9fc98be1a93d55f8921b683686b387b6ede7e380d8cd2252f138bc3a271bfb832ba0857c587899dfc16735ef555335c5dbf2c9ad4eaab3956570f27c0fb43cc0a477640f84f36d", 0x91}, {&(0x7f0000000200)="c8849647c37dfe8d85573b764876fe061adebd25682b7642d4f75f", 0x1b}, {&(0x7f0000000640)="447780b22b3a48d4bcacce8ef9294c3d824552aee51af6e15bae9f7d029cb356f22060096f440a20e5914314a1e0bbc2aba4673b32ce52eff243c93809a33e730f46", 0x42}, {&(0x7f00000004c0)="a8db90487bf2626b7b2662fc6a1b04af2df146a2278984392b3f0566d4e08e600e9ced6dc97388801710aeecdb", 0x2d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000780)="b7f3b6a55d4a5ac1974b98fb8561960dbbb897c017b2e0c8b258f48cabc0e045e65df0fc7d29319042137ab89b1ea8ec76ed1fd2c3a0d7f71341c99e650bd3de9949", 0x42}, {&(0x7f0000000900)="e3d6ffe00a247965d054fdd7bd24c59e2e181eca4abba84b8eda551f95313ba49506457403ee418e4880a6f4ba941e8151322e20c9f16c4ab50f9e6167890301c6832b1e590179fa2f1280321dd39bb3a7a9b6ce662446d943f56a60ff1af51f608bd723d5274864703a0e9d52308f669095968e92cb070c054a197a1cf04bff2e1c78689da7008efdbbe9619e57b26b05bd556b5bc7e6d3152febf0156e88bc9deaa801bb171c8d8091772d73b84e3a804c99a9268e289885a7a9811db0c9f7caa270761c12b2662d4b385b9c0215", 0xcf}, {&(0x7f0000000a00)="6b9e5eb3d20d5fbe55b5b0f281a48485f06844e1eadc2f299f1faf9bcd7b2c9811ec8eb37daf8cde90bcab16c65a8272", 0x30}, {&(0x7f0000000c80)="cb1443efff807c4e9c60dc0621d4c7fc9adf47f188885c406ee2b4c18df9f983de3093dd631d1003bc9bdb6e20e7efb158e6d4aab1b72ca7424b0b6835b206edeb435e827149c67d630d2fa24c008397f3e03a626401d586529976a6715604791ab9ab4a367279143cdb9996c59b5c1742f55a8039bfa4e516ae8df316ecd204da4206132028d79f851cc2410313d84a6eea45067d6d149be72c6e17d34b4e94a704681968ddd00b0b50e46b3d68aa9d6e6d", 0xb2}, {&(0x7f0000000ec0)="9ae6717dd834cbc3613b8ae150d33cece2db5070a0bc3b94da7a1a5b86c2ac2b3d660377935ec5f393d7198415cf787bc204e3a13924cc0d092a9483e651b00fb7ff2d4c893a45a02092049e61698a3a96ef4eae9d98ca66f845c3df05d3e431b67333f4f9aa36c7b81f5ff82041defe4340f4008694958a3f52ed108af07323497a01ff3ac50dff62fa696af4057c9627a54b7a05ece26049f4cf8c514f32610b93fc9532f005a12d0aa71158b08f5f3bbff94bf0c78fc53ba1bf226548859f5507aa50e1709fdc399e4a58d13edb262d7a39039700c02136b6c37125f715b2", 0xe0}, {&(0x7f0000000d40)="a386e2466c226dd9c369195786b08ae7379ad417cda2b173da81485e83c8dcea002bb06f42603dd2e5d3de49bc7eed1701e469c96151f30691ed561e5666ffcc9c6fced8b3fc78211bea837d958cdbbeb5e3981b1b5fee9eff582bfe636cd773", 0x60}], 0x6}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001380)="cb7af9a9", 0x4}, {&(0x7f00000013c0)="8e66473d0297d9c01de8f20116381141a5d781ce725814545482864a3466c2ca6a0cd84ce3ab8508edb7f3085d6f2a97b207f4613f763de4a240cf6dd5f0cb490a507f07e0302fe5e32adb593680604e", 0x50}, {&(0x7f0000001480)="d12dba473103e12d2e8e44ff3c83fca4679970de0af0ab1f2602746481b49f878f7e8ff6b20536cb883d2d165ded7b0bf76456a55fe2af", 0x37}], 0x3}}], 0x6, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a4efaa8c147dcb1786d9df723186ccebd489ff7b0d86d247eb95a1ce6271bfd0baa34a8beb3f3544dc367d98ca10aa2616b0a86b3b74c1ccc883a01a822c4f3dec83dcca4d2ca0b4b34949eda70a71c837abb5d41d7fe1c9dec9ff63b6bc684ed642f8e1e75742a9065b17f2649e0e9845847f28b3561dd41c4c56f61c3c5e985b8c83f6cebc82a7c2eb8da77c9eb", 0x91}, {&(0x7f0000000c40)="b4207053c783840adc326e2741bc", 0xe}], 0x2) 33.180385259s ago: executing program 0 (id=1635): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x24048890) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 32.816096987s ago: executing program 0 (id=1638): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$update(0x2, r1, &(0x7f0000000880)="2bcd2defe96da2d02d2247c8473553242d7b35c80792060552f58769230000000000000005ed88b0f47cb29b44c8e8fa78854d6a338d756c7160a74ec7e6676338705ea154bdef167e40ed31726087f165964e471efb48a949cf3a1ac64e0438e3515f5498f254a84fefef25d6e3fe15e6c121c7de4b94f55f76be9a5f8ca43984e7cad730dcead45190550d2b7d7953278b0b1a0910b4413c176bb2ffee3dc21bba4489fbbfc2b680032661ee4f77fab988a7397da8146d0724", 0xba) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r1, r1}, &(0x7f0000000140)=""/61, 0x3d, &(0x7f0000000340)={&(0x7f0000000280)={'cbcmac(aes)\x00'}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) 32.649794736s ago: executing program 0 (id=1640): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 11.582276772s ago: executing program 5 (id=1769): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.828553189s ago: executing program 2 (id=1798): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) 7.753619878s ago: executing program 5 (id=1801): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 6.850519294s ago: executing program 2 (id=1802): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x13, 0xffffffffffffffff, 0x68e31000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000002900", @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.839019067s ago: executing program 5 (id=1803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.459528551s ago: executing program 5 (id=1808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b0000000000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 4.579882739s ago: executing program 5 (id=1811): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="201c04"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.72579964s ago: executing program 6 (id=1837): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40600) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b", 0xff}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) preadv(r0, 0x0, 0x0, 0x6, 0x7) syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400000000202e16227f8aebc14b6dcef0c594d6bce05c46100796f285ebd6ec0c4cc570944780c9841d9e80d4ea63832364fa05872a26f6901e32c7c14fe9a88b202d782c92b0471384689ddb41fc76aca5406da9276c4b52c8f5b9b6dafb91df78d9ae7d3c89cb998502cff5e2438e706d2f1420b1b5ab5c2155513e7e02f43cbfe1eb52859855c201d6e2793e839734eead6b25bad50fa9681e79cd6bfef1b4fc3c00235323640756e94d2ef2c983763dddf3cc17fe747a3ec4b018d60b9c5b1ccabaf7c14d00ef38b66820f65ce46516c50a6c11b4875aeb5a199326863aa5f71588a94b2eda9aa47c986f27ab724dc1a435e4"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.50104564s ago: executing program 2 (id=1841): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 2.489893065s ago: executing program 6 (id=1842): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.393355226s ago: executing program 2 (id=1844): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x24048890) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.269215006s ago: executing program 2 (id=1847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040800001b0000000002000000400004803c0001800900010068617368000000002c00028008000340000000ff08000240000000000800014000000000080004400000000008000640000100010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x4, 0x20000000, 0xffff, r2, 0x0, 0x4, 'syz0\x00', 0x0}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r2, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) fstat(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x18160cd, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB, @ANYRESDEC=r5]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r6, 0x0, 0x8060010) memfd_create(&(0x7f0000000ac0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x55, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010001fff00000000000000000000000037d2b63d7fa2df8fa9b4605dc3d393ab0a73ef448b5aabcd31482b73eccbd39b8a1f731f6ec0d280c2974c6c43c11cb637686760ab446d58609979fc6e5d5520231a6fef6e15019667f33011ec89ad", @ANYRES32=0x0, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 1.547410598s ago: executing program 5 (id=1851): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x13, 0xffffffffffffffff, 0x68e31000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000002900", @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.507990845s ago: executing program 6 (id=1853): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40600) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)}, {&(0x7f0000000300)="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", 0xff}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) preadv(r0, 0x0, 0x0, 0x6, 0x7) syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400000000202e16227f8aebc14b6dcef0c594d6bce05c46100796f285ebd6ec0c4cc570944780c9841d9e80d4ea63832364fa05872a26f6901e32c7c14fe9a88b202d782c92b0471384689ddb41fc76aca5406da9276c4b52c8f5b9b6dafb91df78d9ae7d3c89cb998502cff5e2438e706d2f1420b1b5ab5c2155513e7e02f43cbfe1eb52859855c201d6e2793e839734eead6b25bad50fa9681e79cd6bfef1b4fc3c00235323640756e94d2ef2c983763dddf3cc17fe747a3ec4b018d60b9c5b1ccabaf7c14d00ef38b66820f65ce46516c50a6c11b4875aeb5a199326863aa5f71588a94b2eda9aa47c986f27ab724dc1a435e4"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.420730888s ago: executing program 2 (id=1854): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 1.350220072s ago: executing program 6 (id=1856): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x24048890) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 453.613344ms ago: executing program 6 (id=1858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 367.694297ms ago: executing program 1 (id=1859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040800001b0000000002000000400004803c0001800900010068617368000000002c00028008000340000000ff080002400000000008000140000000000800044000"], 0x94}}, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x4, 0x20000000, 0xffff, r2, 0x0, 0x4, 'syz0\x00', 0x0}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) fstat(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x18160cd, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030302006000000303030302c757365725f69643d3650ca668266cf2d4880a97ca5133419ca313fb6144b3476941e36785e14d0a75e5295393bb6c5036d0000000000e02966efad0840880b3526fe5ca0469981f23741f7a9ad1ffa7dc3c38a773467e5482b5206146ebce2e13ff4511cbfbae5b2e0032093fe6f25603e83445cd5b4c7098c7e34aa77999f4d2df72114c324c853348872a2995b64f20ad1a5de10e1af2d860af12b2fd899bc81956ad4d29231584d2b1188cdc921390d74fe01c1959ecc36e958387d6533ee84254bd60e95d7521ccae09e4bd18c436c96604cc0865ce78c446c66499d061528267119f70f5aceb78a64ff794e2e6db103914422029cf85036446b7278c813828195cd3a0945e7341aa0a8dd971f15317910c6048470450a96a8fa67a0484ef1bf199d935ae261cbf1ecb5deb7b0360806f696fe8a59af785c3b176068c2a21837d87c2c53dfd0b01dd0c0b45a5373f9d84316f13ee07ac2e09bc7918d99aa66aee7b8513f941474362faa53c8e29987862f8112eaec1176021b958b2a1fea292473a99e29348083dd4894e192a15a6ded3823fbe975ea04dfdf7ba856bfe178589c7492", @ANYRESDEC=0xee01, @ANYRESDEC=r5]) socket$nl_generic(0x10, 0x3, 0x10) 282.159124ms ago: executing program 1 (id=1860): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 275.956614ms ago: executing program 1 (id=1861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) 227.091915ms ago: executing program 1 (id=1862): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="201c04"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 134.096212ms ago: executing program 1 (id=1863): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.523647ms ago: executing program 6 (id=1864): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=1865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x8, 0x7ffc0002}, {0xfff7, 0x3, 0x9, 0x7}]}) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): omiscuous mode [ 265.912939][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.040233][ T13] bridge_slave_1: left allmulticast mode [ 266.040251][ T13] bridge_slave_1: left promiscuous mode [ 266.040382][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.131264][ T13] bridge_slave_0: left allmulticast mode [ 266.131290][ T13] bridge_slave_0: left promiscuous mode [ 266.131505][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.615508][ T5809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 266.950380][ T5809] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 266.950408][ T5809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.953804][ T5809] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.953819][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.953830][ T5809] usb 2-1: Product: syz [ 266.953837][ T5809] usb 2-1: Manufacturer: syz [ 266.953844][ T5809] usb 2-1: SerialNumber: syz [ 266.979144][ T5809] usb 2-1: config 0 descriptor?? [ 266.986821][ T5809] usb 2-1: selecting invalid altsetting 0 [ 267.321640][ T5865] usb 2-1: USB disconnect, device number 3 [ 267.422234][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.010008][ T7470] Set syz1 is full, maxelem 6117 reached [ 268.012127][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.355078][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 268.381471][ T13] bond0 (unregistering): Released all slaves [ 268.422302][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 268.422481][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 268.575566][ T7475] ceph: No mds server is up or the cluster is laggy [ 268.912314][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 268.931639][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 269.301810][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.622539][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.707107][ T13] bond0 (unregistering): Released all slaves [ 271.928706][ T13] hsr_slave_0: left promiscuous mode [ 272.004901][ T13] hsr_slave_1: left promiscuous mode [ 272.005795][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.057727][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.093226][ T7517] binder: Unknown parameter '3ta4s' [ 272.316995][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 272.378977][ T13] hsr_slave_0: left promiscuous mode [ 272.631515][ T7523] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.132370][ T7526] nvme_fabrics: missing parameter 'transport=%s' [ 273.132387][ T7526] nvme_fabrics: missing parameter 'nqn=%s' [ 273.179519][ T13] hsr_slave_1: left promiscuous mode [ 273.180437][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.242191][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.385235][ T5858] udevd[5858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 273.390742][ T6518] udevd[6518]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.155105][ T13] team0 (unregistering): Port device team_slave_1 removed [ 274.345279][ T13] team0 (unregistering): Port device team_slave_0 removed [ 275.469116][ T7548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.153630][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 278.669898][ T7565] nbd: socks must be embedded in a SOCK_ITEM attr [ 278.974914][ T7567] nvme_fabrics: missing parameter 'transport=%s' [ 278.974930][ T7567] nvme_fabrics: missing parameter 'nqn=%s' [ 279.268921][ T5858] udevd[5858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 279.290689][ T6518] udevd[6518]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 279.477413][ T13] team0 (unregistering): Port device team_slave_1 removed [ 279.655460][ T13] team0 (unregistering): Port device team_slave_0 removed [ 280.519304][ T7514] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 280.519344][ T7514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 280.519364][ T7514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 280.522421][ T37] audit: type=1800 audit(1769464912.310:2): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.314" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 281.212621][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 281.212809][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 281.216314][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 281.216477][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 281.308857][ T7595] ceph: No mds server is up or the cluster is laggy [ 281.686538][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 281.686653][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 281.970029][ T7185] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.064625][ T7185] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.174821][ T7185] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.338370][ T7185] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.978430][ T7621] Set syz1 is full, maxelem 6117 reached [ 284.896176][ T7203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.944999][ T7203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.107409][ T7203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.620222][ T7203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.561587][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.852182][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.918346][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.918437][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.940525][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.985175][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.985459][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.078703][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.122789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.122931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.197646][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.206012][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.061106][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.134635][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.356375][ T7185] veth0_vlan: entered promiscuous mode [ 292.397544][ T7185] veth1_vlan: entered promiscuous mode [ 293.107889][ T7203] veth0_vlan: entered promiscuous mode [ 293.137064][ T7185] veth0_macvtap: entered promiscuous mode [ 293.171248][ T7203] veth1_vlan: entered promiscuous mode [ 293.174854][ T7185] veth1_macvtap: entered promiscuous mode [ 293.218729][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.221398][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.430721][ T5995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.435510][ T5995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.435816][ T5995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.435855][ T5995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.868870][ T5808] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 294.458314][ T7203] veth0_macvtap: entered promiscuous mode [ 294.536331][ T7203] veth1_macvtap: entered promiscuous mode [ 294.692271][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.693685][ T7736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 294.790028][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.261931][ T3574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.276384][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.276396][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.423744][ T5996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.428303][ T5996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.492795][ T5996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.643547][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.651623][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.658524][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.674792][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.675674][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.111079][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.111092][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.837538][ T5808] Bluetooth: hci4: command tx timeout [ 299.383461][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.402337][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.413098][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.470124][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.477179][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.831345][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 300.362606][ T7783] nbd: socks must be embedded in a SOCK_ITEM attr [ 300.882263][ T7785] nvme_fabrics: missing parameter 'transport=%s' [ 300.882319][ T7785] nvme_fabrics: missing parameter 'nqn=%s' [ 301.060736][ T5802] Bluetooth: hci4: command tx timeout [ 301.724008][ T5858] udevd[5858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.735548][ T5858] udevd[5858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.745856][ T5802] Bluetooth: hci3: command tx timeout [ 301.949511][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 302.412072][ T7804] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.679478][ T7806] nvme_fabrics: missing parameter 'transport=%s' [ 302.679542][ T7806] nvme_fabrics: missing parameter 'nqn=%s' [ 303.117027][ T5858] udevd[5858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 303.285129][ T5802] Bluetooth: hci4: command tx timeout [ 303.290972][ T6518] udevd[6518]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 304.179705][ T5802] Bluetooth: hci3: command tx timeout [ 304.353365][ T5802] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 304.354614][ T5802] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 304.355910][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 304.513680][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 304.516957][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.516980][ T10] usb 1-1: config 0 has no interface number 0 [ 304.517048][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 304.521301][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 304.521327][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.521347][ T10] usb 1-1: Product: syz [ 304.521360][ T10] usb 1-1: Manufacturer: syz [ 304.521374][ T10] usb 1-1: SerialNumber: syz [ 305.507954][ T5802] Bluetooth: hci4: command tx timeout [ 307.009577][ T5802] Bluetooth: hci3: command tx timeout [ 307.053201][ T10] usb 1-1: config 0 descriptor?? [ 307.087720][ T10] smsc75xx v1.0.0 [ 307.471187][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 307.559771][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 307.762000][ T3574] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.814445][ T10] usb 1-1: USB disconnect, device number 4 [ 307.951027][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 309.258102][ T5802] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 309.258320][ T5802] Bluetooth: hci2: Injecting HCI hardware error event [ 309.258583][ T5802] Bluetooth: hci3: command tx timeout [ 309.258943][ T5802] Bluetooth: hci2: hardware error 0x00 [ 309.320982][ T3574] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.024317][ T7880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 311.644774][ T3574] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.688911][ T5802] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 311.986162][ T7881] nvme_fabrics: missing parameter 'transport=%s' [ 311.986179][ T7881] nvme_fabrics: missing parameter 'nqn=%s' [ 313.533914][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 313.715238][ T10] libceph: connect (1)[c::]:6789 error -101 [ 313.715403][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 313.792354][ T7895] ceph: No mds server is up or the cluster is laggy [ 313.985920][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 313.986109][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 314.208529][ T7901] Set syz1 is full, maxelem 6117 reached [ 314.543843][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 314.544020][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 314.611303][ T6500] udevd[6500]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 314.634886][ T5858] udevd[5858]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 314.887816][ T3574] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.086532][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.087606][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.087783][ T7754] bridge_slave_0: entered allmulticast mode [ 315.090207][ T7754] bridge_slave_0: entered promiscuous mode [ 315.682272][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.685595][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.685803][ T7754] bridge_slave_1: entered allmulticast mode [ 315.696139][ T7754] bridge_slave_1: entered promiscuous mode [ 316.359336][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.459840][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.660739][ T7754] team0: Port device team_slave_0 added [ 316.769857][ T7754] team0: Port device team_slave_1 added [ 316.783924][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 317.066386][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.066402][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.066426][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.081598][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.081613][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.081637][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.034154][ T3574] bridge_slave_1: left allmulticast mode [ 318.034180][ T3574] bridge_slave_1: left promiscuous mode [ 318.045980][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.487949][ T3574] bridge_slave_0: left allmulticast mode [ 320.487988][ T3574] bridge_slave_0: left promiscuous mode [ 320.488237][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.867277][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.867334][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.142201][ T8027] Set syz1 is full, maxelem 6117 reached [ 327.950613][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.419815][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.484056][ T3574] bond0 (unregistering): Released all slaves [ 334.486397][ T808] libceph: connect (1)[c::]:6789 error -101 [ 334.494415][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 334.506703][ T808] libceph: connect (1)[c::]:6789 error -101 [ 334.567143][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 334.856969][ T8074] ceph: No mds server is up or the cluster is laggy [ 334.895066][ T808] libceph: connect (1)[c::]:6789 error -101 [ 334.955719][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 336.870400][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.870522][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.871035][ T7776] bridge_slave_0: entered allmulticast mode [ 336.873624][ T7776] bridge_slave_0: entered promiscuous mode [ 336.953514][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.953649][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.953829][ T7776] bridge_slave_1: entered allmulticast mode [ 336.991848][ T59] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 337.172980][ T59] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.173045][ T59] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 337.173097][ T59] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.173191][ T59] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 337.173247][ T59] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 337.194258][ T59] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.194296][ T59] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.194359][ T59] usb 2-1: Product: syz [ 337.194373][ T59] usb 2-1: Manufacturer: syz [ 337.521961][ T7776] bridge_slave_1: entered promiscuous mode [ 338.237587][ T7754] hsr_slave_0: entered promiscuous mode [ 338.290616][ T7754] hsr_slave_1: entered promiscuous mode [ 338.332902][ T7754] debugfs: 'hsr0' already exists in 'hsr' [ 338.332959][ T7754] Cannot create hsr debugfs directory [ 338.430250][ T59] cdc_wdm 2-1:1.0: skipping garbage [ 338.430583][ T59] cdc_wdm 2-1:1.0: skipping garbage [ 339.015709][ T59] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 339.015740][ T59] cdc_wdm 2-1:1.0: Unknown control protocol [ 339.105703][ T59] usb 2-1: USB disconnect, device number 4 [ 339.757494][ T8098] kvm: kvm [8097]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 339.770507][ T8098] kvm: kvm [8097]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 340.099367][ T7776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.201096][ T7776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.311852][ T3574] hsr_slave_0: left promiscuous mode [ 341.492774][ T3574] hsr_slave_1: left promiscuous mode [ 341.494779][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.494803][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.487728][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.487754][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.614134][ T3574] veth1_macvtap: left promiscuous mode [ 342.614211][ T3574] veth0_macvtap: left promiscuous mode [ 342.614354][ T3574] veth1_vlan: left promiscuous mode [ 342.614446][ T3574] veth0_vlan: left promiscuous mode [ 347.179963][ T59] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 347.211989][ T5797] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 347.342669][ T59] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.342695][ T59] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 347.342714][ T59] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.342908][ T59] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 347.342923][ T59] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 347.344522][ T59] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.344542][ T59] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.344552][ T59] usb 2-1: Product: syz [ 347.344559][ T59] usb 2-1: Manufacturer: syz [ 347.397969][ T5797] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 347.397986][ T5797] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.402155][ T59] cdc_wdm 2-1:1.0: skipping garbage [ 347.402165][ T59] cdc_wdm 2-1:1.0: skipping garbage [ 347.474924][ T59] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 347.474944][ T59] cdc_wdm 2-1:1.0: Unknown control protocol [ 347.520366][ T5797] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 347.520394][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 347.520413][ T5797] usb 3-1: Product: syz [ 347.520427][ T5797] usb 3-1: Manufacturer: syz [ 347.520440][ T5797] usb 3-1: SerialNumber: syz [ 347.561733][ T5797] usb 3-1: config 0 descriptor?? [ 347.564253][ T8165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 347.613650][ T5797] usb 3-1: selecting invalid altsetting 0 [ 347.655840][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 347.656700][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 347.656968][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 347.656987][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 347.658085][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 347.658106][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 347.658337][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 347.658356][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 347.658607][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 347.658663][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 347.659119][ T5903] usb 2-1: USB disconnect, device number 5 [ 347.659203][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 347.659214][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 347.659222][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 347.798634][ T5797] usb 3-1: USB disconnect, device number 3 [ 347.936254][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.439707][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 349.653337][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 354.419420][ T7776] team0: Port device team_slave_0 added [ 355.542243][ T7776] team0: Port device team_slave_1 added [ 355.765006][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.765017][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.765030][ T7776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.766840][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.766848][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.766861][ T7776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.358606][ T59] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 356.534668][ T59] usb 1-1: Using ep0 maxpacket: 32 [ 356.660458][ T59] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 356.667534][ T59] usb 1-1: config 0 has no interface number 0 [ 356.697542][ T59] usb 1-1: config 0 interface 184 has no altsetting 0 [ 357.041326][ T59] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 357.041355][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.041365][ T59] usb 1-1: Product: syz [ 357.041372][ T59] usb 1-1: Manufacturer: syz [ 357.041379][ T59] usb 1-1: SerialNumber: syz [ 357.089329][ T59] usb 1-1: config 0 descriptor?? [ 357.109093][ T59] smsc75xx v1.0.0 [ 357.579887][ T7776] hsr_slave_0: entered promiscuous mode [ 357.597321][ T7776] hsr_slave_1: entered promiscuous mode [ 357.622859][ T7776] debugfs: 'hsr0' already exists in 'hsr' [ 357.623157][ T7776] Cannot create hsr debugfs directory [ 358.272138][ T59] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 358.488729][ T59] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 358.488756][ T59] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 358.488775][ T59] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 358.488792][ T59] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 358.489037][ T59] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 358.574927][ T59] usb 1-1: USB disconnect, device number 5 [ 358.597109][ T8216] udevd[8216]: setting mode of /dev/bus/usb/001/005 to 020664 failed: No such file or directory [ 358.597235][ T8216] udevd[8216]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 360.642350][ T3574] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.092345][ T3574] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.117466][ T8266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 361.359861][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.371530][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.379100][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.380283][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.380970][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.628676][ T3574] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.890359][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 362.765926][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.765954][ T31] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 362.765972][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.766022][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 362.766052][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 362.790612][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.790635][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.790645][ T31] usb 3-1: Product: syz [ 362.790652][ T31] usb 3-1: Manufacturer: syz [ 362.901053][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 362.901073][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 362.928083][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 362.928103][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 362.964822][ T3574] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.143986][ T5865] usb 3-1: USB disconnect, device number 4 [ 363.183755][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 363.346591][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.346618][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 363.346637][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.346692][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 363.346717][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 363.348474][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.348498][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.348516][ T10] usb 1-1: Product: syz [ 363.348530][ T10] usb 1-1: Manufacturer: syz [ 363.423492][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 363.423511][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 363.426831][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 363.426848][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 363.579466][ T5808] Bluetooth: hci5: command tx timeout [ 363.731010][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 363.863781][ T5865] usb 1-1: USB disconnect, device number 6 [ 364.217543][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.372453][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.373703][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.375727][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.376552][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.835724][ T5808] Bluetooth: hci5: command tx timeout [ 366.573025][ T5808] Bluetooth: hci6: command tx timeout [ 366.806460][ T3574] bridge_slave_1: left allmulticast mode [ 366.806487][ T3574] bridge_slave_1: left promiscuous mode [ 366.806754][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.928347][ T3574] bridge_slave_0: left allmulticast mode [ 366.928365][ T3574] bridge_slave_0: left promiscuous mode [ 366.928561][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.289601][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 367.483994][ T5797] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 367.830652][ T8344] nbd: socks must be embedded in a SOCK_ITEM attr [ 368.001706][ T8346] nvme_fabrics: missing parameter 'transport=%s' [ 368.001760][ T8346] nvme_fabrics: missing parameter 'nqn=%s' [ 368.041953][ T5808] Bluetooth: hci5: command tx timeout [ 368.531747][ T5797] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 368.531765][ T5797] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 368.531775][ T5797] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 368.531795][ T5797] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 368.531815][ T5797] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.531825][ T5797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 368.537126][ T5797] usb 1-1: string descriptor 0 read error: -22 [ 368.537224][ T5797] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 368.537236][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.543416][ T5797] usb 1-1: config 0 descriptor?? [ 368.560921][ T5797] hub 1-1:0.0: bad descriptor, ignoring hub [ 368.560966][ T5797] hub 1-1:0.0: probe with driver hub failed with error -5 [ 368.586895][ T8186] udevd[8186]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 368.697105][ T8216] udevd[8216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 368.796514][ T5808] Bluetooth: hci6: command tx timeout [ 369.367897][ T31] libceph: connect (1)[c::]:6789 error -101 [ 369.368079][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 369.368639][ T31] libceph: connect (1)[c::]:6789 error -101 [ 369.368804][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 369.493270][ T5797] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 369.530031][ T8364] ceph: No mds server is up or the cluster is laggy [ 369.759564][ T5797] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 369.759590][ T5797] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 369.759608][ T5797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 369.759640][ T5797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 369.759673][ T5797] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.759692][ T5797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 370.066920][ T5797] usb 2-1: string descriptor 0 read error: -22 [ 370.067028][ T5797] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 370.067041][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.092478][ T5797] usb 2-1: config 0 descriptor?? [ 370.092833][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 370.094798][ T5797] hub 2-1:0.0: bad descriptor, ignoring hub [ 370.100164][ T5797] hub 2-1:0.0: probe with driver hub failed with error -5 [ 370.103645][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 370.250509][ T5808] Bluetooth: hci5: command tx timeout [ 370.713186][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.775201][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.809300][ T3574] bond0 (unregistering): Released all slaves [ 371.019939][ T5808] Bluetooth: hci6: command tx timeout [ 371.055217][ T5903] usb 2-1: USB disconnect, device number 6 [ 371.076409][ T10] usb 1-1: USB disconnect, device number 7 [ 371.202759][ T8378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 371.202776][ T8378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 371.202838][ T8378] vhci_hcd vhci_hcd.0: Device attached [ 371.458271][ T5903] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 371.503480][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 371.508444][ T5797] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 371.933496][ T8383] nbd: socks must be embedded in a SOCK_ITEM attr [ 372.505484][ T8385] nvme_fabrics: missing parameter 'transport=%s' [ 372.505536][ T8385] nvme_fabrics: missing parameter 'nqn=%s' [ 372.560383][ T5797] usb 3-1: config 0 has no interfaces? [ 372.561938][ T5797] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 372.561964][ T5797] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 372.561984][ T5797] usb 3-1: Manufacturer: syz [ 372.580352][ T5797] usb 3-1: config 0 descriptor?? [ 372.689056][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.689242][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.689583][ T8273] bridge_slave_0: entered allmulticast mode [ 372.725658][ T8273] bridge_slave_0: entered promiscuous mode [ 372.807145][ T8287] udevd[8287]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 372.827997][ T8186] udevd[8186]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 372.895397][ T5797] usb 3-1: USB disconnect, device number 5 [ 372.896796][ T8379] vhci_hcd: connection reset by peer [ 372.899810][ T6474] vhci_hcd vhci_hcd.2: stop threads [ 372.899830][ T6474] vhci_hcd vhci_hcd.2: release socket [ 372.900588][ T6474] vhci_hcd vhci_hcd.2: disconnect device [ 372.946638][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.946816][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.946937][ T8273] bridge_slave_1: entered allmulticast mode [ 372.949391][ T8273] bridge_slave_1: entered promiscuous mode [ 373.329576][ T5808] Bluetooth: hci6: command tx timeout [ 374.212601][ T10] libceph: connect (1)[c::]:6789 error -101 [ 374.212784][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 374.213272][ T10] libceph: connect (1)[c::]:6789 error -101 [ 374.213518][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 374.354053][ T8406] ceph: No mds server is up or the cluster is laggy [ 374.506814][ T10] libceph: connect (1)[c::]:6789 error -101 [ 374.507000][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 376.025295][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.096638][ T8431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 377.562657][ T3574] hsr_slave_0: left promiscuous mode [ 378.269912][ T5903] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 378.290382][ T3574] hsr_slave_1: left promiscuous mode [ 378.291324][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.291346][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.470083][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.589835][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.589862][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.935152][ T3574] veth1_macvtap: left promiscuous mode [ 378.935258][ T3574] veth0_macvtap: left promiscuous mode [ 378.935537][ T3574] veth1_vlan: left promiscuous mode [ 378.935804][ T3574] veth0_vlan: left promiscuous mode [ 380.833343][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 380.833544][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 381.077951][ T8456] ceph: No mds server is up or the cluster is laggy [ 381.101657][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 381.101923][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 381.668305][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 381.668490][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 385.180887][ T8489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 385.182543][ T8490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 387.435948][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.436013][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.311481][ T8532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.267990][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 392.268169][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 392.289470][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 392.289578][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 392.401613][ T8531] ceph: No mds server is up or the cluster is laggy [ 392.744696][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 394.199803][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 400.064714][ T8583] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 400.866131][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 401.423729][ T8593] nbd: socks must be embedded in a SOCK_ITEM attr [ 402.738630][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.186484][ T8216] udevd[8216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 404.362631][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.480116][ T8273] team0: Port device team_slave_0 added [ 404.512363][ T8273] team0: Port device team_slave_1 added [ 406.428045][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.428062][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.428087][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.541589][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.541599][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.541612][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.825890][ T8273] hsr_slave_0: entered promiscuous mode [ 406.827302][ T8273] hsr_slave_1: entered promiscuous mode [ 406.828250][ T8273] debugfs: 'hsr0' already exists in 'hsr' [ 406.828272][ T8273] Cannot create hsr debugfs directory [ 406.829419][ T8306] chnl_net:caif_netlink_parms(): no params data found [ 409.234667][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.540'. [ 409.447126][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.447316][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.447483][ T8306] bridge_slave_0: entered allmulticast mode [ 409.449918][ T8306] bridge_slave_0: entered promiscuous mode [ 409.494240][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.494438][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.494616][ T8306] bridge_slave_1: entered allmulticast mode [ 409.518122][ T8306] bridge_slave_1: entered promiscuous mode [ 409.647837][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.675751][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.048812][ T8306] team0: Port device team_slave_0 added [ 411.115403][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 411.450271][ T8676] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.398456][ T8306] team0: Port device team_slave_1 added [ 412.578122][ T8216] udevd[8216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 412.654955][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.654969][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.654990][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.660727][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.660740][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.660764][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.084213][ T8306] hsr_slave_0: entered promiscuous mode [ 413.085593][ T8306] hsr_slave_1: entered promiscuous mode [ 413.088362][ T8306] debugfs: 'hsr0' already exists in 'hsr' [ 413.088385][ T8306] Cannot create hsr debugfs directory [ 415.518917][ T3574] bridge_slave_1: left allmulticast mode [ 415.518936][ T3574] bridge_slave_1: left promiscuous mode [ 415.519076][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.602766][ T3574] bridge_slave_0: left allmulticast mode [ 415.602784][ T3574] bridge_slave_0: left promiscuous mode [ 415.603021][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.676779][ T3574] bridge_slave_1: left allmulticast mode [ 415.676797][ T3574] bridge_slave_1: left promiscuous mode [ 415.676950][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.768941][ T3574] bridge_slave_0: left allmulticast mode [ 415.768959][ T3574] bridge_slave_0: left promiscuous mode [ 415.769089][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.567350][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.716958][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.810722][ T3574] bond0 (unregistering): Released all slaves [ 418.246298][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.743129][ T8722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.734251][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.806888][ T3574] bond0 (unregistering): Released all slaves [ 421.993087][ T3574] hsr_slave_0: left promiscuous mode [ 422.027634][ T8742] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 422.027650][ T8742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.027739][ T8742] vhci_hcd vhci_hcd.0: Device attached [ 422.046248][ T3574] hsr_slave_1: left promiscuous mode [ 422.048052][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.089739][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.153179][ T5781] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 423.136425][ T10] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 423.136856][ T5797] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 423.164793][ T5781] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.164817][ T5781] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 423.164835][ T5781] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.164883][ T5781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 423.164908][ T5781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 423.220020][ T5781] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.220045][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.220064][ T5781] usb 2-1: Product: syz [ 423.220077][ T5781] usb 2-1: Manufacturer: syz [ 423.248430][ T3574] hsr_slave_0: left promiscuous mode [ 423.261099][ T5781] cdc_wdm 2-1:1.0: skipping garbage [ 423.261109][ T5781] cdc_wdm 2-1:1.0: skipping garbage [ 423.311180][ T3574] hsr_slave_1: left promiscuous mode [ 423.312066][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.313989][ T5781] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 423.314007][ T5781] cdc_wdm 2-1:1.0: Unknown control protocol [ 423.320744][ T5797] usb 3-1: config 0 has no interfaces? [ 423.322212][ T5797] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 423.322237][ T5797] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 423.322255][ T5797] usb 3-1: Manufacturer: syz [ 423.333701][ T5797] usb 3-1: config 0 descriptor?? [ 423.404724][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.500247][ T808] usb 2-1: USB disconnect, device number 7 [ 423.582011][ T8743] vhci_hcd: cannot find a urb of seqnum 1663411776 max seqnum 2 [ 423.598790][ T6646] vhci_hcd vhci_hcd.2: stop threads [ 423.598813][ T6646] vhci_hcd vhci_hcd.2: release socket [ 423.598885][ T6646] vhci_hcd vhci_hcd.2: disconnect device [ 423.635390][ T5797] usb 3-1: USB disconnect, device number 6 [ 424.495695][ T8749] Set syz1 is full, maxelem 6117 reached [ 426.148113][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 426.291043][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 426.535930][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.552480][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.555894][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.575293][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.576178][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.894741][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 428.578676][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 428.834865][ T5802] Bluetooth: hci3: command tx timeout [ 429.140265][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.142833][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.180833][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.194414][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.195224][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.714964][ T8793] Set syz1 is full, maxelem 6117 reached [ 430.329121][ T8806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.058560][ T5802] Bluetooth: hci3: command tx timeout [ 431.477168][ T8816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.491180][ T5802] Bluetooth: hci4: command tx timeout [ 433.282687][ T5802] Bluetooth: hci3: command tx timeout [ 433.710145][ T5802] Bluetooth: hci4: command tx timeout [ 434.309364][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 435.507048][ T5802] Bluetooth: hci3: command tx timeout [ 436.042742][ T8836] Set syz1 is full, maxelem 6117 reached [ 436.229407][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 436.681735][ T5802] Bluetooth: hci4: command tx timeout [ 439.537194][ T5802] Bluetooth: hci4: command tx timeout [ 442.265784][ T8790] chnl_net:caif_netlink_parms(): no params data found [ 443.318068][ T8891] binder: BINDER_SET_CONTEXT_MGR already set [ 443.318082][ T8891] binder: 8890:8891 ioctl 4018620d 200000000100 returned -16 [ 443.494233][ T8891] binder: BINDER_SET_CONTEXT_MGR already set [ 443.494247][ T8891] binder: 8890:8891 ioctl 4018620d 2000000002c0 returned -16 [ 443.696378][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 443.850122][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.850319][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.850498][ T8790] bridge_slave_0: entered allmulticast mode [ 443.853442][ T8790] bridge_slave_0: entered promiscuous mode [ 444.779062][ T8902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.084183][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.093040][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.121053][ T8790] bridge_slave_1: entered allmulticast mode [ 445.135409][ T8790] bridge_slave_1: entered promiscuous mode [ 446.328526][ T8790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.628765][ T8790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.630531][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.630732][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.630920][ T8769] bridge_slave_0: entered allmulticast mode [ 446.666464][ T8769] bridge_slave_0: entered promiscuous mode [ 447.267520][ T8915] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 447.594182][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.594303][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.594508][ T8769] bridge_slave_1: entered allmulticast mode [ 447.598320][ T8769] bridge_slave_1: entered promiscuous mode [ 448.542446][ T8924] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 448.792119][ T8790] team0: Port device team_slave_0 added [ 448.823552][ T8790] team0: Port device team_slave_1 added [ 448.927646][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.973764][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.974380][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.974389][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.974402][ T8790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.058439][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.058448][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.058461][ T8790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.423279][ T8769] team0: Port device team_slave_0 added [ 449.683364][ T8769] team0: Port device team_slave_1 added [ 452.136848][ T8790] hsr_slave_0: entered promiscuous mode [ 452.140768][ T8790] hsr_slave_1: entered promiscuous mode [ 452.141749][ T8790] debugfs: 'hsr0' already exists in 'hsr' [ 452.141770][ T8790] Cannot create hsr debugfs directory [ 452.163394][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.163407][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.163432][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.305876][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.305886][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.305899][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.759922][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.759992][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.559480][ T8769] hsr_slave_0: entered promiscuous mode [ 455.560749][ T8769] hsr_slave_1: entered promiscuous mode [ 455.588650][ T8769] debugfs: 'hsr0' already exists in 'hsr' [ 455.588671][ T8769] Cannot create hsr debugfs directory [ 460.121188][ T8790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 460.184196][ T8790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 460.279316][ T8790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 460.377539][ T8790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 460.459568][ T3574] bridge_slave_1: left allmulticast mode [ 460.459595][ T3574] bridge_slave_1: left promiscuous mode [ 460.459847][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.609430][ T3574] bridge_slave_0: left allmulticast mode [ 460.609449][ T3574] bridge_slave_0: left promiscuous mode [ 460.609607][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.722836][ T3574] bridge_slave_1: left allmulticast mode [ 460.722855][ T3574] bridge_slave_1: left promiscuous mode [ 460.722997][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.845683][ T3574] bridge_slave_0: left allmulticast mode [ 460.845702][ T3574] bridge_slave_0: left promiscuous mode [ 460.845856][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.969788][ T8983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 463.328069][ T8990] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 464.490607][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.672106][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.808771][ T3574] bond0 (unregistering): Released all slaves [ 469.204418][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.363966][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.477780][ T3574] bond0 (unregistering): Released all slaves [ 471.538144][ T3574] hsr_slave_0: left promiscuous mode [ 471.576830][ T3574] hsr_slave_1: left promiscuous mode [ 471.579383][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.630133][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.826995][ T3574] hsr_slave_0: left promiscuous mode [ 471.873592][ T3574] hsr_slave_1: left promiscuous mode [ 471.882284][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.938526][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.459570][ T9044] fuse: Bad value for 'group_id' [ 473.459582][ T9044] fuse: Bad value for 'group_id' [ 478.965059][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 481.366841][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 481.704140][ T9082] fuse: Bad value for 'group_id' [ 481.704154][ T9082] fuse: Bad value for 'group_id' [ 483.793780][ T9090] block nbd1: NBD_DISCONNECT [ 486.172140][ T5903] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 486.435621][ T5903] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 486.435817][ T5903] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 486.435835][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 486.439083][ T5903] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 486.439100][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 486.439116][ T5903] usb 1-1: Product: syz [ 486.439124][ T5903] usb 1-1: Manufacturer: syz [ 486.439131][ T5903] usb 1-1: SerialNumber: syz [ 487.483584][ T5903] usb 1-1: config 0 descriptor?? [ 487.547698][ T5903] usb 1-1: can't set config #0, error -71 [ 487.565634][ T5903] usb 1-1: USB disconnect, device number 8 [ 488.342576][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 489.321553][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 489.321741][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 489.379710][ T9118] nbd: socks must be embedded in a SOCK_ITEM attr [ 489.415590][ T9124] ceph: No mds server is up or the cluster is laggy [ 489.795866][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 490.071081][ T9062] udevd[9062]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 490.204019][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 492.578852][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.582464][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.611755][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.612485][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.612954][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.924571][ T9153] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 493.485671][ T9158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 494.903773][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 494.909028][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 494.932709][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 494.942411][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 494.953403][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 495.146211][ T9173] ceph: No mds server is up or the cluster is laggy [ 495.149656][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 495.149762][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 495.428712][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 495.428826][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 495.545048][ T5802] Bluetooth: hci5: command tx timeout [ 497.511253][ T5802] Bluetooth: hci6: command tx timeout [ 497.767900][ T5802] Bluetooth: hci5: command tx timeout [ 498.568488][ T9150] chnl_net:caif_netlink_parms(): no params data found [ 499.737542][ T5802] Bluetooth: hci6: command tx timeout [ 499.991617][ T5802] Bluetooth: hci5: command tx timeout [ 501.959157][ T5802] Bluetooth: hci6: command tx timeout [ 502.200301][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 502.215083][ T5802] Bluetooth: hci5: command tx timeout [ 502.236466][ T5913] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 502.311600][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.311743][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.311937][ T9150] bridge_slave_0: entered allmulticast mode [ 502.314402][ T9150] bridge_slave_0: entered promiscuous mode [ 502.416592][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.416728][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.416900][ T9150] bridge_slave_1: entered allmulticast mode [ 502.429264][ T9150] bridge_slave_1: entered promiscuous mode [ 502.462414][ T5913] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 502.462431][ T5913] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 502.462446][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 502.464638][ T5913] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 502.464653][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 502.464665][ T5913] usb 1-1: Product: syz [ 502.464674][ T5913] usb 1-1: Manufacturer: syz [ 502.464681][ T5913] usb 1-1: SerialNumber: syz [ 502.592084][ T5913] usb 1-1: config 0 descriptor?? [ 502.643376][ T5913] usb 1-1: selecting invalid altsetting 0 [ 502.875391][ T5913] usb 1-1: USB disconnect, device number 9 [ 502.938023][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.104639][ T9254] udevd[9254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.195825][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.605968][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.606035][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.606139][ T9169] bridge_slave_0: entered allmulticast mode [ 503.615739][ T9169] bridge_slave_0: entered promiscuous mode [ 503.755597][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 503.755773][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 503.840422][ T9264] ceph: No mds server is up or the cluster is laggy [ 504.182205][ T5802] Bluetooth: hci6: command tx timeout [ 505.178974][ T9150] team0: Port device team_slave_0 added [ 505.203566][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.203692][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.203883][ T9169] bridge_slave_1: entered allmulticast mode [ 505.206296][ T9169] bridge_slave_1: entered promiscuous mode [ 506.623280][ T9150] team0: Port device team_slave_1 added [ 507.938522][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.939338][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.939351][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.939365][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.942044][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.942053][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.942067][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.082100][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.394697][ T9314] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 509.643580][ T9317] nbd: couldn't find device at index 1 [ 511.865587][ T9169] team0: Port device team_slave_0 added [ 512.640004][ T9150] hsr_slave_0: entered promiscuous mode [ 512.641326][ T9150] hsr_slave_1: entered promiscuous mode [ 512.642235][ T9150] debugfs: 'hsr0' already exists in 'hsr' [ 512.642257][ T9150] Cannot create hsr debugfs directory [ 512.646133][ T9169] team0: Port device team_slave_1 added [ 512.940631][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.940648][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.940672][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.105208][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.105218][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.105232][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.885135][ T9169] hsr_slave_0: entered promiscuous mode [ 513.885810][ T9169] hsr_slave_1: entered promiscuous mode [ 513.886269][ T9169] debugfs: 'hsr0' already exists in 'hsr' [ 513.886283][ T9169] Cannot create hsr debugfs directory [ 514.440698][ T3574] bridge_slave_1: left allmulticast mode [ 514.440716][ T3574] bridge_slave_1: left promiscuous mode [ 514.440858][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.589757][ T3574] bridge_slave_0: left allmulticast mode [ 514.589783][ T3574] bridge_slave_0: left promiscuous mode [ 514.590864][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.719535][ T3574] bridge_slave_1: left allmulticast mode [ 514.719554][ T3574] bridge_slave_1: left promiscuous mode [ 514.719691][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.190169][ T3574] bridge_slave_0: left allmulticast mode [ 515.190197][ T3574] bridge_slave_0: left promiscuous mode [ 515.190424][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.474249][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.925430][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.998289][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 518.173415][ T9380] nbd: socks must be embedded in a SOCK_ITEM attr [ 518.475238][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.475288][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.035240][ T3574] bond0 (unregistering): Released all slaves [ 519.294922][ T9252] udevd[9252]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 519.316228][ T9251] udevd[9251]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.284266][ T9393] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 522.288765][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.576131][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.692559][ T3574] bond0 (unregistering): Released all slaves [ 524.537239][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 524.537429][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 524.537937][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 524.538105][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 524.735834][ T9421] ceph: No mds server is up or the cluster is laggy [ 524.824337][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 524.824509][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 525.077352][ T9150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 525.329014][ T3574] hsr_slave_0: left promiscuous mode [ 526.956098][ T3574] hsr_slave_1: left promiscuous mode [ 526.957176][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.302498][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.989567][ T9453] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 529.858451][ T3574] hsr_slave_0: left promiscuous mode [ 529.925570][ T3574] hsr_slave_1: left promiscuous mode [ 529.926516][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.012781][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.569370][ T9474] fuse: Unknown parameter 'grou00000000000000000000' [ 531.072775][ T9481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.204247][ T5903] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 532.601981][ T5903] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 532.602014][ T5903] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 532.602041][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 532.604688][ T5903] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 532.604715][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 532.604733][ T5903] usb 1-1: Product: syz [ 532.604747][ T5903] usb 1-1: Manufacturer: syz [ 532.604768][ T5903] usb 1-1: SerialNumber: syz [ 532.696531][ T5903] usb 1-1: config 0 descriptor?? [ 532.774731][ T5903] usb 1-1: selecting invalid altsetting 0 [ 532.930708][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 533.252431][ T5865] usb 1-1: USB disconnect, device number 10 [ 533.400472][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 537.463493][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 537.702379][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 541.344241][ T9150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.402583][ T9150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.458881][ T9150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 541.830542][ T9615] Set syz1 is full, maxelem 6117 reached [ 543.590343][ T808] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 543.794213][ T808] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.794241][ T808] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 543.794259][ T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.794308][ T808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 543.796502][ T808] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.796529][ T808] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.796547][ T808] usb 3-1: Product: syz [ 543.796561][ T808] usb 3-1: Manufacturer: syz [ 543.814228][ T808] cdc_wdm 3-1:1.0: skipping garbage [ 543.814244][ T808] cdc_wdm 3-1:1.0: skipping garbage [ 543.814337][ T808] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 544.022795][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.063570][ T9] usb 3-1: USB disconnect, device number 7 [ 544.499482][ T9150] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.528707][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.528843][ T6646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.547821][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.548015][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.047564][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 546.197381][ T9676] nbd: socks must be embedded in a SOCK_ITEM attr [ 546.536638][ T9169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.308118][ T808] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 547.365068][ T9169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.430974][ T9251] udevd[9251]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 547.441792][ T9169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.614880][ T808] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 547.614903][ T808] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 547.614918][ T808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 547.617210][ T808] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.617237][ T808] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 547.617256][ T808] usb 2-1: Product: syz [ 547.617269][ T808] usb 2-1: Manufacturer: syz [ 547.617283][ T808] usb 2-1: SerialNumber: syz [ 547.683280][ T808] usb 2-1: config 0 descriptor?? [ 547.708925][ T9169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.732565][ T808] usb 2-1: selecting invalid altsetting 0 [ 547.905038][ T5903] usb 2-1: USB disconnect, device number 8 [ 547.943328][ T9239] udevd[9239]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.024388][ T808] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 548.087002][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.189121][ T808] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 548.189153][ T808] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 548.189179][ T808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 548.211598][ T808] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.211625][ T808] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.211644][ T808] usb 3-1: Product: syz [ 548.211666][ T808] usb 3-1: Manufacturer: syz [ 548.211679][ T808] usb 3-1: SerialNumber: syz [ 548.261122][ T808] usb 3-1: config 0 descriptor?? [ 548.284740][ T808] usb 3-1: selecting invalid altsetting 0 [ 548.445355][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.499067][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.522096][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.522219][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.564657][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.564732][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.621313][ T5865] usb 3-1: USB disconnect, device number 8 [ 549.224561][ T9150] veth0_vlan: entered promiscuous mode [ 549.255096][ T9150] veth1_vlan: entered promiscuous mode [ 549.394581][ T9150] veth0_macvtap: entered promiscuous mode [ 549.407459][ T9150] veth1_macvtap: entered promiscuous mode [ 550.039437][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.047514][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.104722][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.179239][ T6646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.180486][ T6646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.181943][ T6646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.218888][ T6646] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.532140][ T9789] binder_alloc: 9756: binder_alloc_buf, no vma [ 551.111798][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.111825][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.240902][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.240921][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.475247][ T9169] veth0_vlan: entered promiscuous mode [ 551.833722][ T9169] veth1_vlan: entered promiscuous mode [ 552.707446][ T9169] veth0_macvtap: entered promiscuous mode [ 552.718287][ T9169] veth1_macvtap: entered promiscuous mode [ 553.604255][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.655652][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.686437][ T1161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.696704][ T1161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.718308][ T1161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.735390][ T1161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.049607][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.560071][ T9842] binder: BINDER_SET_CONTEXT_MGR already set [ 555.560135][ T9842] binder: 9835:9842 ioctl 4018620d 2000000002c0 returned -16 [ 557.370348][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.370368][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.741859][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.741880][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.035732][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 558.035842][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 558.164599][ T9862] ceph: No mds server is up or the cluster is laggy [ 558.318026][ T9] libceph: connect (1)[c::]:6789 error -101 [ 558.318228][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 559.913961][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 559.917381][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 559.948736][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 559.950653][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 559.953481][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.511591][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 560.511868][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 560.512575][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 560.512750][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 560.792857][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 560.795212][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 560.845106][ T9906] ceph: No mds server is up or the cluster is laggy [ 561.291440][ T5903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 561.537295][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 561.539519][ T5903] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 561.539543][ T5903] usb 2-1: config 0 has no interface number 0 [ 561.539589][ T5903] usb 2-1: config 0 interface 184 has no altsetting 0 [ 561.542414][ T5903] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 561.542441][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.542460][ T5903] usb 2-1: Product: syz [ 561.542474][ T5903] usb 2-1: Manufacturer: syz [ 561.542488][ T5903] usb 2-1: SerialNumber: syz [ 561.550808][ T5903] usb 2-1: config 0 descriptor?? [ 561.565115][ T5903] smsc75xx v1.0.0 [ 562.625116][ T5802] Bluetooth: hci3: command tx timeout [ 563.859760][ T9] libceph: connect (1)[c::]:6789 error -101 [ 563.861948][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 563.863155][ T9] libceph: connect (1)[c::]:6789 error -101 [ 563.863633][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 564.219023][ T9937] ceph: No mds server is up or the cluster is laggy [ 564.271028][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 564.271052][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 564.392662][ T10] libceph: connect (1)[c::]:6789 error -101 [ 564.392777][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 564.393145][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 564.393170][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 564.393188][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 564.393205][ T5903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 564.393395][ T5903] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 564.657172][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.840638][ T5802] Bluetooth: hci3: command tx timeout [ 565.808481][ T9] usb 2-1: USB disconnect, device number 9 [ 567.090089][ T5802] Bluetooth: hci3: command tx timeout [ 568.156102][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.266612][ T5802] Bluetooth: hci3: command tx timeout [ 569.269304][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.694610][ T5802] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 571.425220][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.509924][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 571.521679][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 571.535638][T10033] ceph: No mds server is up or the cluster is laggy [ 571.949346][ T31] libceph: connect (1)[c::]:6789 error -101 [ 571.949544][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 571.970846][ T9887] chnl_net:caif_netlink_parms(): no params data found [ 572.377095][T10048] binder: BINDER_SET_CONTEXT_MGR already set [ 572.377132][T10048] binder: 10042:10048 ioctl 4018620d 2000000002c0 returned -16 [ 575.152170][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.152338][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.152516][ T9887] bridge_slave_0: entered allmulticast mode [ 575.204929][ T9887] bridge_slave_0: entered promiscuous mode [ 575.285653][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.285720][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.285830][ T9887] bridge_slave_1: entered allmulticast mode [ 575.287143][ T9887] bridge_slave_1: entered promiscuous mode [ 575.531350][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 575.710507][ T5802] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 576.466860][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 576.466896][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 576.466923][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 576.476717][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 576.476745][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 576.476763][ T9] usb 2-1: Product: syz [ 576.476775][ T9] usb 2-1: Manufacturer: syz [ 576.476786][ T9] usb 2-1: SerialNumber: syz [ 576.489209][ T9] usb 2-1: config 0 descriptor?? [ 576.494646][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.501452][ T9] usb 2-1: selecting invalid altsetting 0 [ 576.517914][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.743453][ T5797] usb 2-1: USB disconnect, device number 10 [ 576.899376][ T13] bridge_slave_1: left allmulticast mode [ 576.899403][ T13] bridge_slave_1: left promiscuous mode [ 576.899824][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.986897][T10083] binder: BINDER_SET_CONTEXT_MGR already set [ 576.986933][T10083] binder: 10077:10083 ioctl 4018620d 2000000002c0 returned -16 [ 577.944625][ T13] bridge_slave_0: left allmulticast mode [ 577.944644][ T13] bridge_slave_0: left promiscuous mode [ 577.961060][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.783334][ T31] libceph: connect (1)[c::]:6789 error -101 [ 579.783532][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 579.784118][ T31] libceph: connect (1)[c::]:6789 error -101 [ 579.784295][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 580.055824][ T31] libceph: connect (1)[c::]:6789 error -101 [ 580.797844][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 580.936859][T10109] ceph: No mds server is up or the cluster is laggy [ 583.089561][ T5865] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 583.089567][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 583.260755][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 583.263891][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 583.263915][ T10] usb 7-1: config 0 has no interface number 0 [ 583.263958][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 583.267694][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 583.267719][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.267737][ T10] usb 7-1: Product: syz [ 583.267751][ T10] usb 7-1: Manufacturer: syz [ 583.267764][ T10] usb 7-1: SerialNumber: syz [ 583.291280][ T10] usb 7-1: config 0 descriptor?? [ 583.328653][ T10] smsc75xx v1.0.0 [ 583.342094][ T5865] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.342118][ T5865] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 583.342144][ T5865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.342197][ T5865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 583.342222][ T5865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 583.345097][ T5865] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.345123][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 583.345148][ T5865] usb 3-1: Product: syz [ 583.345162][ T5865] usb 3-1: Manufacturer: syz [ 583.457904][ T5865] cdc_wdm 3-1:1.0: skipping garbage [ 583.457922][ T5865] cdc_wdm 3-1:1.0: skipping garbage [ 583.474538][ T5865] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 583.474555][ T5865] cdc_wdm 3-1:1.0: Unknown control protocol [ 583.715262][ T5865] usb 3-1: USB disconnect, device number 9 [ 585.144974][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.145047][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.424070][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 585.424099][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 585.426357][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 585.426384][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 585.426402][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 585.426420][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 585.426707][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 586.032815][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 586.230369][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 586.230390][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 586.230404][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.232735][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 586.232759][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 586.232778][ T10] usb 3-1: Product: syz [ 586.232790][ T10] usb 3-1: Manufacturer: syz [ 586.232803][ T10] usb 3-1: SerialNumber: syz [ 586.237618][ T10] usb 3-1: config 0 descriptor?? [ 586.314240][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.336294][ T10] usb 3-1: selecting invalid altsetting 0 [ 586.416070][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.516178][ T13] bond0 (unregistering): Released all slaves [ 587.385929][ T10] usb 3-1: USB disconnect, device number 10 [ 587.451849][ T9887] team0: Port device team_slave_0 added [ 587.460537][ T5797] usb 7-1: USB disconnect, device number 2 [ 587.594387][ T9887] team0: Port device team_slave_1 added [ 589.067031][T10221] syz.2.974 (10221) used greatest stack depth: 16856 bytes left [ 589.285899][T10231] overlayfs: missing 'lowerdir' [ 590.541914][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.541932][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.541957][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.550008][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.550024][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.550050][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.964847][T10265] overlayfs: missing 'lowerdir' [ 593.379202][ T5865] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 593.479042][ T9887] hsr_slave_0: entered promiscuous mode [ 593.479892][ T9887] hsr_slave_1: entered promiscuous mode [ 593.480448][ T9887] debugfs: 'hsr0' already exists in 'hsr' [ 593.480461][ T9887] Cannot create hsr debugfs directory [ 593.536917][ T5865] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 593.536949][ T5865] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 593.536976][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 593.541049][ T5865] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 593.541079][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 593.541099][ T5865] usb 2-1: Product: syz [ 593.541113][ T5865] usb 2-1: Manufacturer: syz [ 593.541127][ T5865] usb 2-1: SerialNumber: syz [ 593.617264][ T5865] usb 2-1: config 0 descriptor?? [ 593.639091][ T5865] usb 2-1: selecting invalid altsetting 0 [ 593.697088][ T13] hsr_slave_0: left promiscuous mode [ 593.760862][ T13] hsr_slave_1: left promiscuous mode [ 593.761443][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.761459][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.813350][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.813380][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.848647][ T5865] usb 2-1: USB disconnect, device number 11 [ 593.987952][ T13] veth1_macvtap: left promiscuous mode [ 593.988052][ T13] veth0_macvtap: left promiscuous mode [ 593.988320][ T13] veth1_vlan: left promiscuous mode [ 593.988571][ T13] veth0_vlan: left promiscuous mode [ 594.713831][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1010'. [ 594.755152][ T5865] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 594.808179][T10309] nbd: socks must be embedded in a SOCK_ITEM attr [ 594.932343][ T5865] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.932371][ T5865] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 594.932389][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.932444][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 594.932470][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 595.020391][ T5865] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.020425][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.020445][ T5865] usb 2-1: Product: syz [ 595.020459][ T5865] usb 2-1: Manufacturer: syz [ 595.076031][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 595.076058][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 595.084197][ T5865] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 595.084215][ T5865] cdc_wdm 2-1:1.0: Unknown control protocol [ 595.187534][ T9251] udevd[9251]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 595.327485][ T5865] usb 2-1: USB disconnect, device number 12 [ 599.088884][T10437] overlayfs: missing 'lowerdir' [ 599.853301][ T13] team0 (unregistering): Port device team_slave_1 removed [ 601.172954][ T13] team0 (unregistering): Port device team_slave_0 removed [ 601.849164][T10479] Set syz1 is full, maxelem 6117 reached [ 602.364956][T10509] overlayfs: missing 'lowerdir' [ 607.361833][T10622] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 607.949866][T10645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.827942][ T9] libceph: connect (1)[c::]:6789 error -101 [ 608.828119][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 608.831147][ T9] libceph: connect (1)[c::]:6789 error -101 [ 608.831326][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 608.973879][T10650] ceph: No mds server is up or the cluster is laggy [ 609.156174][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 609.156343][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 612.226900][T10708] binder: BINDER_SET_CONTEXT_MGR already set [ 612.226915][T10708] binder: 10697:10708 ioctl 4018620d 2000000002c0 returned -16 [ 612.677142][ T9887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.765800][ T9887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.952387][ T9887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.988656][ T9887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 613.106200][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 613.106378][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 613.107421][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 613.107605][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 613.255416][T10743] ceph: No mds server is up or the cluster is laggy [ 613.404518][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 613.456010][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 614.109544][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.100408][ T9887] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.132566][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.134107][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.216573][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.216716][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.708784][T10796] binder: BINDER_SET_CONTEXT_MGR already set [ 615.708801][T10796] binder: 10788:10796 ioctl 4018620d 2000000002c0 returned -16 [ 615.733827][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.370169][ T9887] veth0_vlan: entered promiscuous mode [ 617.414305][ T9887] veth1_vlan: entered promiscuous mode [ 617.475986][ T9887] veth0_macvtap: entered promiscuous mode [ 617.490574][ T9887] veth1_macvtap: entered promiscuous mode [ 617.521332][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.539537][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.566061][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.578283][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.583742][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.607679][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.844912][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.844933][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.783373][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 624.930121][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 624.951023][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 624.953664][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 624.968129][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 624.969408][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 625.021690][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 625.181462][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 625.183588][ T5913] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 625.183664][ T5913] usb 3-1: config 0 has no interface number 0 [ 625.183694][ T5913] usb 3-1: config 0 interface 184 has no altsetting 0 [ 625.189814][ T5913] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 625.189841][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.189859][ T5913] usb 3-1: Product: syz [ 625.189872][ T5913] usb 3-1: Manufacturer: syz [ 625.189885][ T5913] usb 3-1: SerialNumber: syz [ 625.202236][ T5913] usb 3-1: config 0 descriptor?? [ 625.234600][ T5913] smsc75xx v1.0.0 [ 625.570956][ T5995] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.906112][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 625.906253][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 626.406661][T10173] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 627.053558][ T5995] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.073613][T10173] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 627.073643][T10173] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 627.073670][T10173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 627.080532][T10173] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 627.080558][T10173] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 627.080579][T10173] usb 2-1: Product: syz [ 627.080593][T10173] usb 2-1: Manufacturer: syz [ 627.080608][T10173] usb 2-1: SerialNumber: syz [ 627.120381][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 627.120409][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 627.120427][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 627.120445][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 627.120793][ T5913] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 627.168773][ T5802] Bluetooth: hci3: command tx timeout [ 627.227623][T10173] usb 2-1: config 0 descriptor?? [ 627.249460][T10173] usb 2-1: selecting invalid altsetting 0 [ 627.453977][ T5995] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.473937][T10173] usb 2-1: USB disconnect, device number 13 [ 627.789142][ T5995] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.237907][T10903] chnl_net:caif_netlink_parms(): no params data found [ 628.274235][ T8087] usb 3-1: USB disconnect, device number 11 [ 628.670291][ T5995] bridge_slave_1: left allmulticast mode [ 628.670320][ T5995] bridge_slave_1: left promiscuous mode [ 628.670564][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.766552][ T5995] bridge_slave_0: left allmulticast mode [ 628.766579][ T5995] bridge_slave_0: left promiscuous mode [ 628.766909][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.390646][ T5802] Bluetooth: hci3: command tx timeout [ 631.616193][ T5802] Bluetooth: hci3: command tx timeout [ 631.723169][ T9] libceph: connect (1)[c::]:6789 error -101 [ 631.723342][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 631.726167][ T9] libceph: connect (1)[c::]:6789 error -101 [ 631.726335][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 631.897608][T11067] ceph: No mds server is up or the cluster is laggy [ 632.407369][T11093] binder: BINDER_SET_CONTEXT_MGR already set [ 632.407383][T11093] binder: 11085:11093 ioctl 4018620d 2000000002c0 returned -16 [ 632.897915][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.037750][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.191975][ T5995] bond0 (unregistering): Released all slaves [ 634.212929][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.213054][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.213247][T10903] bridge_slave_0: entered allmulticast mode [ 634.217889][T10903] bridge_slave_0: entered promiscuous mode [ 634.233521][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.233646][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.233819][T10903] bridge_slave_1: entered allmulticast mode [ 634.237293][T10903] bridge_slave_1: entered promiscuous mode [ 634.382759][ T5802] Bluetooth: hci3: command tx timeout [ 634.490232][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.494073][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.604878][T10903] team0: Port device team_slave_0 added [ 634.616857][T10903] team0: Port device team_slave_1 added [ 634.720019][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.720036][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.720062][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.770940][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.770955][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.770980][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.930625][T10903] hsr_slave_0: entered promiscuous mode [ 634.931876][T10903] hsr_slave_1: entered promiscuous mode [ 634.932728][T10903] debugfs: 'hsr0' already exists in 'hsr' [ 634.932750][T10903] Cannot create hsr debugfs directory [ 635.070464][T11159] overlayfs: missing 'lowerdir' [ 635.775700][T10173] libceph: connect (1)[c::]:6789 error -101 [ 635.775878][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 635.776339][T10173] libceph: connect (1)[c::]:6789 error -101 [ 635.776510][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 635.826929][T11172] ceph: No mds server is up or the cluster is laggy [ 637.003141][T11190] binder: BINDER_SET_CONTEXT_MGR already set [ 637.003156][T11190] binder: 11186:11190 ioctl 4018620d 2000000002c0 returned -16 [ 637.783784][T11219] overlayfs: missing 'lowerdir' [ 639.215335][T11242] binder: BINDER_SET_CONTEXT_MGR already set [ 639.215351][T11242] binder: 11238:11242 ioctl 4018620d 2000000002c0 returned -16 [ 639.774601][ T5995] hsr_slave_0: left promiscuous mode [ 639.825980][ T5995] hsr_slave_1: left promiscuous mode [ 639.826555][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.826570][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.011633][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.011650][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.195852][ T5995] veth1_macvtap: left promiscuous mode [ 640.204400][ T5995] veth0_macvtap: left promiscuous mode [ 640.211295][ T5995] veth1_vlan: left promiscuous mode [ 640.211479][ T5995] veth0_vlan: left promiscuous mode [ 643.631903][T11325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 645.487412][T11368] ceph: No mds server is up or the cluster is laggy [ 645.492543][ T9] libceph: connect (1)[c::]:6789 error -101 [ 645.492730][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 645.546317][T11371] binder: BINDER_SET_CONTEXT_MGR already set [ 645.546331][T11371] binder: 11360:11371 ioctl 4018620d 2000000002c0 returned -16 [ 649.467689][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1469'. [ 649.522126][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 649.522302][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 649.524441][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 649.524616][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 649.663907][T11485] ceph: No mds server is up or the cluster is laggy [ 649.679909][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 649.845964][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.846031][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.081039][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 652.739109][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1529'. [ 652.799751][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 652.799928][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 652.947388][T11608] ceph: No mds server is up or the cluster is laggy [ 654.771086][ T8087] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 654.946470][ T8087] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 654.946491][ T8087] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 654.946505][ T8087] usb 3-1: config 0 interface 0 has no altsetting 0 [ 654.948487][ T8087] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 654.948515][ T8087] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 654.948535][ T8087] usb 3-1: Product: syz [ 654.948548][ T8087] usb 3-1: Manufacturer: syz [ 654.948563][ T8087] usb 3-1: SerialNumber: syz [ 654.952331][ T8087] usb 3-1: config 0 descriptor?? [ 654.977129][ T8087] usb 3-1: selecting invalid altsetting 0 [ 655.214846][ T8087] usb 3-1: USB disconnect, device number 12 [ 655.327889][T10443] udevd[10443]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.778766][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 658.129018][T10903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 658.340902][T10903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 658.574347][T10903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 659.318651][T10903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 659.643141][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.693266][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.700790][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.700930][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.747441][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.748260][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.620863][T10903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.620888][T10903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.198665][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 661.198842][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 661.370764][T11830] ceph: No mds server is up or the cluster is laggy [ 661.731929][ T9] libceph: connect (1)[c::]:6789 error -101 [ 661.732129][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 661.788077][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.285985][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1616'. [ 662.346642][T11866] binder: BINDER_SET_CONTEXT_MGR already set [ 662.346656][T11866] binder: 11815:11866 ioctl 4018620d 2000000002c0 returned -16 [ 662.993776][T11851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.155101][ T8087] libceph: connect (1)[c::]:6789 error -101 [ 663.155294][ T8087] libceph: mon0 (1)[c::]:6789 connect error [ 663.158224][ T8087] libceph: connect (1)[c::]:6789 error -101 [ 663.158397][ T8087] libceph: mon0 (1)[c::]:6789 connect error [ 663.278476][T11879] ceph: No mds server is up or the cluster is laggy [ 663.435763][ T8087] libceph: connect (1)[c::]:6789 error -101 [ 663.438075][ T8087] libceph: mon0 (1)[c::]:6789 connect error [ 663.899209][T10903] veth0_vlan: entered promiscuous mode [ 663.927758][T10903] veth1_vlan: entered promiscuous mode [ 663.940506][ T808] libceph: connect (1)[c::]:6789 error -101 [ 663.940686][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 663.941139][ T808] libceph: connect (1)[c::]:6789 error -101 [ 663.941302][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 664.076047][T11895] ceph: No mds server is up or the cluster is laggy [ 664.214088][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 664.219634][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 664.587803][T10903] veth0_macvtap: entered promiscuous mode [ 664.603252][T10903] veth1_macvtap: entered promiscuous mode [ 664.687395][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.690031][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.763692][ T6448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.774870][ T6448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.775115][ T6448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.775347][ T6448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.419917][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.419935][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.533837][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.533857][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.982467][T11949] binder: BINDER_SET_CONTEXT_MGR already set [ 665.982482][T11949] binder: 11913:11949 ioctl 4018620d 2000000002c0 returned -16 [ 666.734276][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.757431][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.780225][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.790341][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.791220][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.913327][T11968] kvm: emulating exchange as write [ 667.266499][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1651'. [ 668.324157][T11976] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 668.615255][T12003] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 668.988691][ T5802] Bluetooth: hci4: command tx timeout [ 671.256839][ T5802] Bluetooth: hci4: command tx timeout [ 671.760080][ T6448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.978123][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 671.978307][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 672.084350][T12055] ceph: No mds server is up or the cluster is laggy [ 672.254067][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 672.256434][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 672.770804][T12073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.882266][ T6448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.946807][T11962] chnl_net:caif_netlink_parms(): no params data found [ 672.970578][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 672.970687][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 672.976790][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 672.976963][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 673.394318][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 673.394433][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 673.447017][ T5802] Bluetooth: hci4: command tx timeout [ 673.560559][T12079] ceph: No mds server is up or the cluster is laggy [ 674.058842][ T5865] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 674.214476][ T6448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.304135][ T5865] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 674.304152][ T5865] usb 6-1: config 0 has no interface number 0 [ 674.304175][ T5865] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 674.304190][ T5865] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 674.304201][ T5865] usb 6-1: config 0 interface 113 has no altsetting 0 [ 674.388349][ T5865] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 674.388367][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.388376][ T5865] usb 6-1: Product: syz [ 674.388384][ T5865] usb 6-1: Manufacturer: syz [ 674.388391][ T5865] usb 6-1: SerialNumber: syz [ 674.429572][ T5865] usb 6-1: config 0 descriptor?? [ 674.615539][ C1] usb 6-1: NFC: Urb failure (status -71) [ 674.623044][ T5865] usb 6-1: NFC: Unable to get FW version [ 674.633462][ T5865] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 674.753197][T10173] libceph: connect (1)[c::]:6789 error -101 [ 674.753307][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 674.754217][T10173] libceph: connect (1)[c::]:6789 error -101 [ 674.754327][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 674.849743][T12104] ceph: No mds server is up or the cluster is laggy [ 675.116382][T10173] libceph: connect (1)[c::]:6789 error -101 [ 675.116576][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 675.244999][ T6448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.672671][ T5802] Bluetooth: hci4: command tx timeout [ 676.200499][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.200698][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.200872][T11962] bridge_slave_0: entered allmulticast mode [ 676.205806][T11962] bridge_slave_0: entered promiscuous mode [ 676.256927][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.261315][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.261532][T11962] bridge_slave_1: entered allmulticast mode [ 676.287833][T11962] bridge_slave_1: entered promiscuous mode [ 676.309972][ T5913] usb 6-1: USB disconnect, device number 2 [ 676.345096][T12131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 676.345119][T12131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 676.369748][T12131] vhci_hcd vhci_hcd.0: Device attached [ 676.410288][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 676.667429][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.802531][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.835615][ T808] usb 38-1: SetAddress Request (2) to port 0 [ 676.835692][ T808] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 678.048918][T11962] team0: Port device team_slave_0 added [ 678.051020][T11962] team0: Port device team_slave_1 added [ 678.118356][T12132] vhci_hcd: connection reset by peer [ 678.119065][ T5995] vhci_hcd vhci_hcd.2: stop threads [ 678.119086][ T5995] vhci_hcd vhci_hcd.2: release socket [ 678.119167][ T5995] vhci_hcd vhci_hcd.2: disconnect device [ 678.169415][ T6448] bridge_slave_1: left allmulticast mode [ 678.169436][ T6448] bridge_slave_1: left promiscuous mode [ 678.169648][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.393562][ T6448] bridge_slave_0: left allmulticast mode [ 678.393581][ T6448] bridge_slave_0: left promiscuous mode [ 678.394587][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.631538][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 678.803402][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 678.805350][ T5865] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 678.805365][ T5865] usb 6-1: config 0 has no interface number 0 [ 678.805391][ T5865] usb 6-1: config 0 interface 184 has no altsetting 0 [ 678.809719][ T5865] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 678.809745][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.809764][ T5865] usb 6-1: Product: syz [ 678.809777][ T5865] usb 6-1: Manufacturer: syz [ 678.809785][ T5865] usb 6-1: SerialNumber: syz [ 678.816609][ T5865] usb 6-1: config 0 descriptor?? [ 678.894416][ T5865] smsc75xx v1.0.0 [ 679.565034][ T5865] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 679.565065][ T5865] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 680.223670][ T5865] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 680.223701][ T5865] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 680.223719][ T5865] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 680.224015][ T5865] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 681.652297][T10173] usb 6-1: USB disconnect, device number 3 [ 681.988697][T10173] libceph: connect (1)[c::]:6789 error -101 [ 681.988871][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 682.062338][T10173] libceph: connect (1)[c::]:6789 error -101 [ 682.062487][T10173] libceph: mon0 (1)[c::]:6789 connect error [ 682.155724][T12223] ceph: No mds server is up or the cluster is laggy [ 682.261728][ T808] usb 38-1: device descriptor read/8, error -110 [ 682.330799][ T9] libceph: connect (1)[c::]:6789 error -101 [ 682.330909][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 682.750536][ T808] usb usb38-port1: attempt power cycle [ 684.094939][ T31] libceph: connect (1)[c::]:6789 error -101 [ 684.095122][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 684.170284][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.278316][T12248] ceph: No mds server is up or the cluster is laggy [ 684.345938][ T808] usb usb38-port1: unable to enumerate USB device [ 684.474964][ T31] libceph: connect (1)[c::]:6789 error -101 [ 684.477392][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 684.801937][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.877840][ T6448] bond0 (unregistering): Released all slaves [ 684.999151][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.999168][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.999195][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.026458][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.026472][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.026499][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.334797][T11962] hsr_slave_0: entered promiscuous mode [ 685.336037][T11962] hsr_slave_1: entered promiscuous mode [ 685.337241][T11962] debugfs: 'hsr0' already exists in 'hsr' [ 685.337264][T11962] Cannot create hsr debugfs directory [ 685.547555][T12278] mmap: syz.2.1759 (12278) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 685.622483][T12278] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1759' sets config #0 [ 687.377088][ T5880] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 687.515621][ T5880] usb 6-1: device descriptor read/64, error -71 [ 687.782739][ T5880] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 687.921878][ T5880] usb 6-1: device descriptor read/64, error -71 [ 688.040510][ T5880] usb usb6-port1: attempt power cycle [ 688.499181][ T5880] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 688.578536][ T5880] usb 6-1: device descriptor read/8, error -71 [ 688.786178][ T6448] hsr_slave_0: left promiscuous mode [ 688.820164][ T6448] hsr_slave_1: left promiscuous mode [ 688.820997][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.821017][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.873164][ T5880] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 688.881409][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.881432][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.907843][ T5880] usb 6-1: device descriptor read/8, error -71 [ 689.100712][ T5880] usb usb6-port1: unable to enumerate USB device [ 689.258595][ T6448] veth1_macvtap: left promiscuous mode [ 689.258697][ T6448] veth0_macvtap: left promiscuous mode [ 689.259017][ T6448] veth1_vlan: left promiscuous mode [ 689.259188][ T6448] veth0_vlan: left promiscuous mode [ 693.806540][T12402] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1808'. [ 694.282677][T10173] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 694.443069][T10173] usb 6-1: Using ep0 maxpacket: 32 [ 694.448608][T10173] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 694.448632][T10173] usb 6-1: config 0 has no interface number 0 [ 694.448683][T10173] usb 6-1: config 0 interface 184 has no altsetting 0 [ 694.484383][T10173] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 694.484410][T10173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.484430][T10173] usb 6-1: Product: syz [ 694.484444][T10173] usb 6-1: Manufacturer: syz [ 694.484458][T10173] usb 6-1: SerialNumber: syz [ 694.535656][T10173] usb 6-1: config 0 descriptor?? [ 694.578494][T10173] smsc75xx v1.0.0 [ 695.227562][T10173] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 695.227593][T10173] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 695.874546][T10173] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 695.874578][T10173] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 695.874597][T10173] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 695.874895][T10173] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 696.145209][T10173] usb 6-1: USB disconnect, device number 8 [ 696.391061][ T808] libceph: connect (1)[c::]:6789 error -101 [ 696.391234][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 696.391709][ T808] libceph: connect (1)[c::]:6789 error -101 [ 696.391885][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 696.557144][T12487] ceph: No mds server is up or the cluster is laggy [ 696.700297][ T808] libceph: connect (1)[c::]:6789 error -101 [ 696.848019][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 698.073795][ T8087] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 698.522169][ T8087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.522222][ T8087] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.522249][ T8087] usb 3-1: config 0 interface 0 has no altsetting 0 [ 698.525243][ T8087] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 698.525269][ T8087] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 698.525288][ T8087] usb 3-1: Product: syz [ 698.525302][ T8087] usb 3-1: Manufacturer: syz [ 698.525315][ T8087] usb 3-1: SerialNumber: syz [ 698.539637][ T8087] usb 3-1: config 0 descrip[ 698.539637][ T8087] usb 3-1: config 0 descriptor?? [ 698.585962][ T8087] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 698.589251][ T8087] ================================================================== [ 698.589263][ T8087] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 698.589311][ T8087] Read of size 8 at addr ffffc900052b2008 by task kworker/1:7/8087 [ 698.589327][ T8087] [ 698.589349][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 698.589376][ T8087] Tainted: [L]=SOFTLOCKUP [ 698.589383][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 698.589395][ T8087] Workqueue: usb_hub_wq hub_event [ 698.589426][ T8087] Call Trace: [ 698.589434][ T8087] [ 698.589445][ T8087] dump_stack_lvl+0xe8/0x150 [ 698.589470][ T8087] print_report+0xba/0x230 [ 698.589491][ T8087] ? __list_add_valid_or_report+0x4e/0x130 [ 698.589517][ T8087] kasan_report+0x117/0x150 [ 698.589543][ T8087] ? __list_add_valid_or_report+0x4e/0x130 [ 698.589576][ T8087] __list_add_valid_or_report+0x4e/0x130 [ 698.589606][ T8087] kcov_remote_stop+0x457/0x680 [ 698.589633][ T8087] hub_event+0x49d8/0x4f60 [ 698.589671][ T8087] ? __pfx_hub_event+0x10/0x10 [ 698.589689][ T8087] ? process_scheduled_works+0xa0f/0x17a0 [ 698.589718][ T8087] ? lock_acquire+0x221/0x330 [ 698.589737][ T8087] ? process_scheduled_works+0xa0f/0x17a0 [ 698.589764][ T8087] ? process_scheduled_works+0xa0f/0x17a0 [ 698.589793][ T8087] process_scheduled_works+0xaec/0x17a0 [ 698.589833][ T8087] ? __pfx_process_scheduled_works+0x10/0x10 [ 698.589860][ T8087] ? do_raw_spin_lock+0x12b/0x2f0 [ 698.589895][ T8087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 698.589919][ T8087] ? schedule+0x90/0x360 [ 698.589945][ T8087] worker_thread+0xda6/0x1360 [ 698.589970][ T8087] ? __kthread_parkme+0x19c/0x1f0 [ 698.589992][ T8087] kthread+0x726/0x8b0 [ 698.590014][ T8087] ? __pfx_worker_thread+0x10/0x10 [ 698.590032][ T8087] ? __pfx_kthread+0x10/0x10 [ 698.590051][ T8087] ? rt_spin_unlock+0x14f/0x200 [ 698.590073][ T8087] ? rt_spin_unlock+0x160/0x200 [ 698.590090][ T8087] ? __pfx_kthread+0x10/0x10 [ 698.590111][ T8087] ret_from_fork+0x51b/0xa40 [ 698.590131][ T8087] ? __pfx_ret_from_fork+0x10/0x10 [ 698.590149][ T8087] ? __switch_to+0xc82/0x1410 [ 698.590176][ T8087] ? __pfx_kthread+0x10/0x10 [ 698.590197][ T8087] ret_from_fork_asm+0x1a/0x30 [ 698.590230][ T8087] [ 698.590238][ T8087] [ 698.590242][ T8087] The buggy address belongs to a vmalloc virtual mapping [ 698.590258][ T8087] Memory state around the buggy address: [ 698.590268][ T8087] ffffc900052b1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 698.590284][ T8087] ffffc900052b1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 698.590296][ T8087] >ffffc900052b2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 698.590310][ T8087] ^ [ 698.590320][ T8087] ffffc900052b2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 698.590332][ T8087] ffffc900052b2100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 698.590342][ T8087] ================================================================== [ 698.590365][ T8087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 698.590384][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 698.590410][ T8087] Tainted: [L]=SOFTLOCKUP [ 698.590417][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 698.590429][ T8087] Workqueue: usb_hub_wq hub_event [ 698.590446][ T8087] Call Trace: [ 698.590452][ T8087] [ 698.590459][ T8087] vpanic+0x1e0/0x670 [ 698.590485][ T8087] panic+0xc5/0xd0 [ 698.590508][ T8087] ? __pfx_panic+0x10/0x10 [ 698.590532][ T8087] ? __list_add_valid_or_report+0x4e/0x130 [ 698.590563][ T8087] ? __list_add_valid_or_report+0x4e/0x130 [ 698.590591][ T8087] check_panic_on_warn+0x89/0xb0 [ 698.590616][ T8087] ? __list_add_valid_or_report+0x4e/0x130 [ 698.590643][ T8087] end_report+0x6f/0x140 [ 698.590667][ T8087] kasan_report+0x128/0x150 [ 698.590693][ T8087] ? __list_add_valid_or_report+0x4e/0x130 [ 698.590724][ T8087] __list_add_valid_or_report+0x4e/0x130 [ 698.590753][ T8087] kcov_remote_stop+0x457/0x680 [ 698.590782][ T8087] hub_event+0x49d8/0x4f60 [ 698.590818][ T8087] ? __pfx_hub_event+0x10/0x10 [ 698.590835][ T8087] ? process_scheduled_works+0xa0f/0x17a0 [ 698.590865][ T8087] ? lock_acquire+0x221/0x330 [ 698.590890][ T8087] ? process_scheduled_works+0xa0f/0x17a0 [ 698.590918][ T8087] ? process_scheduled_works+0xa0f/0x17a0 [ 698.590947][ T8087] process_scheduled_works+0xaec/0x17a0 [ 698.590986][ T8087] ? __pfx_process_scheduled_works+0x10/0x10 [ 698.591013][ T8087] ? do_raw_spin_lock+0x12b/0x2f0 [ 698.591041][ T8087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 698.591067][ T8087] ? schedule+0x90/0x360 [ 698.591091][ T8087] worker_thread+0xda6/0x1360 [ 698.591116][ T8087] ? __kthread_parkme+0x19c/0x1f0 [ 698.591137][ T8087] kthread+0x726/0x8b0 [ 698.591159][ T8087] ? __pfx_worker_thread+0x10/0x10 [ 698.591177][ T8087] ? __pfx_kthread+0x10/0x10 [ 698.591197][ T8087] ? rt_spin_unlock+0x14f/0x200 [ 698.591217][ T8087] ? rt_spin_unlock+0x160/0x200 [ 698.591234][ T8087] ? __pfx_kthread+0x10/0x10 [ 698.591256][ T8087] ret_from_fork+0x51b/0xa40 [ 698.591275][ T8087] ? __pfx_ret_from_fork+0x10/0x10 [ 698.591293][ T8087] ? __switch_to+0xc82/0x1410 [ 698.591320][ T8087] ? __pfx_kthread+0x10/0x10 [ 698.591342][ T8087] ret_from_fork_asm+0x1a/0x30 [ 698.591374][ T8087] [ 698.591703][ T8087] Kernel Offset: disabled