last executing test programs: 2m17.127863996s ago: executing program 2 (id=17): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000900)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x100, @empty}}}, 0x108) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0xc0190000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000340)={{}, {r3, r4+60000000}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(0x0, &(0x7f0000000000)) 2m13.487418138s ago: executing program 2 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x0, 0x401, 0x2, 0x6}, @eth={@broadcast, @random="3ce5d7cb8553", @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0x8e, "01"}}}}}}, 0x23) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e00)=@newtaction={0x14, 0x58, 0x284f}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0x1) 2m7.27683437s ago: executing program 2 (id=36): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000306030000000000000000000000008609000200733200"/42], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000002000000010006000085010400001000000003000000000000000100000000000000050000000d00000000000000080000000900000002000000030000000d0000000100000004000000020000000000000003000000000000000000000c0500000000000000d400000900000000000000000000000900000000000000000000000a0200000000007a09abab7bc2b466a4169a5ac5ad54291d39dba7aea2e43cf8616e2d5f5f09ba69d7ea9d91dbff5c6cb9074eed1397d0ccc3642d3dc7118c5dda54428ca292804ce30c758f5cafaa14e744b999b7846ac3bcec"], 0x0, 0x9e, 0x0, 0x3}, 0x28) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x103980, 0x80, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000080800", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x8804) 2m3.106179421s ago: executing program 2 (id=44): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000440), 0x4000) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x2, 0x2}]}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x20, 0x12, 0x70d, 0x70bd2a, 0x25dfdbde, {0x7, 0x0, 0x0, 0x0, 0x20, 0x5d000}}, 0x20}}, 0x20008080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x240440c0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000180)={0xc, 0x1}) 1m58.420607862s ago: executing program 2 (id=47): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1m54.965637171s ago: executing program 2 (id=54): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000640)="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", &(0x7f0000001640)="2f991b763413b64f40fc4d1ca467b3d0f95493f4eeb82f07e8fc9a40f4fd617236f99f340274d63bbca48bac68bc45a3748e735d21f11583cb3415c2049bd40593a12f08f8790d361449e148d234acc610430bd37117f1626b5839a7de5a29cedd597f1a1ca9442775f7b69481c764eda6c43c7c3bae4552ebcc2dec8fed1b4445e9a7a40b2cd869a111c25553632150ccc793eb419066b704087e1e9ef1a3e6811b1bd6a46ed28b967f322ca95abae47ce5e744e796aa0c42"}}, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0xa, 0x5, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098f3d1) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) process_vm_readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/191, 0xbf}, {0x0}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000001d80)=""/4106, 0x100a}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/177, 0xb1}], 0x7, &(0x7f0000000680), 0x0, 0x0) r6 = pidfd_getfd(r3, r5, 0x0) readlinkat(r6, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x7ffe}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 1m53.610553664s ago: executing program 4 (id=58): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x300000000000f7) bpf$PROG_LOAD(0x5, 0x0, 0x1298b7cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$revoke(0x3, r0) 1m49.93880265s ago: executing program 4 (id=62): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbcf, &(0x7f0000007cc0)="$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") socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x20, 0x3, 0x10fffb) 1m48.637240909s ago: executing program 4 (id=66): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1m46.454927009s ago: executing program 4 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 1m45.872429224s ago: executing program 4 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000010) ioprio_set$pid(0x3, 0x0, 0x0) 1m43.250155811s ago: executing program 4 (id=73): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(0x0, 0x4800, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x7ffe}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 1m27.860599614s ago: executing program 33 (id=73): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(0x0, 0x4800, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x114, &(0x7f0000000600)={0x0, 0x10, 0x400, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000380), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) io_setup(0x5, &(0x7f0000000000)=0x0) r8 = inotify_init() io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0xd1c, 0xfffd, {0x2, 0x1}, {0x5b, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x6, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) 1m18.43751224s ago: executing program 3 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1m14.922826199s ago: executing program 3 (id=116): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x42) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x2af7, &(0x7f0000000380)={0x0, 0x200525e4, 0x10100, 0x2, 0x202e4}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000180)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000300)={0x0, {0x0, 0x0, @qam}}) 1m11.381487529s ago: executing program 3 (id=122): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1m10.025348989s ago: executing program 3 (id=124): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 54.793239149s ago: executing program 34 (id=124): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 19.261761529s ago: executing program 0 (id=175): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200", 0x74}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf8", 0x6e}], 0x1}}], 0x2, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4111, 0x100f, 0x1, 0x0}, &(0x7f0000000180)=0x40) 18.712913003s ago: executing program 0 (id=176): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$eJzsmb9rFEEUx7+zu/crhICNhY2FB0Y0e7t7KkFIEcFeiD+7HGYNMZtc2Fv1LiAm2NhYWgi2/gMWFqks7OxstdCAYGE67QIjM/eyO9ncHa4xWPg+kMl33s6bfTOz+z24A8Mw/y3bX35+fnZ5+to5AOOoo0Lxb3Y2xjLGf3px/+zzmSsvX3989W514tFWfr5KwfuPA3g7ayNBTfellNK8XtetcFQVdYpdh4UzSkxQgDLmYeEGhUII3CZ9z9DtGokodO+0o4W7S1HoqcZXTaCapnl/B8DOpsACgCrVJ4zrnd76ciuKwngDgBYUKcm9+8TpmD8Uo/ZP1zdrYYb6NTqvW0+fbKq+S3HP2D8fFnzSTQjMkZ5GBa7rZltirP+Eg/R87EHrzwlVxyGXTcLOR7q5MfPbw9KPTe2PlPEX6tl3MGLkJvyWKB0u/V8JgWX1SMSdXnXU4JsPotpRLbBED2LRdJGPqFNMI8d3tt4fzPpqROTjQTMLYCPu9H6s9YsatGOjX5kjE9q4cvakxYexLLJn3EVmLlPOwDGZPyn3Po3MPxw4qX80kpW1Rqe3PrW00loMF8PVIGhe9M573oWgoY2o3x7wvd3U/6ran8aM+UtDvLIsyui2kiT2u0AS+2k/6LfGiz33pv1d51ja/yxMnurPoQ5RL3vIB52gP0v/F7sSk/aQchiGYRiGYRiGYRiGYRiGYQpyEkJ/C0o/VMkcgLz0UEoZXNWjfwUAAP//bpBKqw==") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x80000001}}, 0x30) 11.337785708s ago: executing program 0 (id=183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(0x0, 0x4800, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 7.461392s ago: executing program 1 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) rt_sigpending(0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0d7d441e3cc89700000000000008193c893f5c59cbdb76ec0000", @ANYRES16, @ANYBLOB="c71825ef58"], 0x7c}}, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 6.6442284s ago: executing program 0 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 6.379599268s ago: executing program 1 (id=191): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000640)="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", &(0x7f0000001640)="2f991b763413b64f40fc4d1ca467b3d0f95493f4eeb82f07e8fc9a40f4fd617236f99f340274d63bbca48bac68bc45a3748e735d21f11583cb3415c2049bd40593a12f08f8790d361449e148d234acc610430bd37117f1626b5839a7de5a29cedd597f1a1ca9442775f7b69481c764eda6c43c7c3bae4552ebcc2dec8fed1b4445e9a7a40b2cd869a111c25553632150ccc793eb419066b704087e1e9ef1a3e6811b1bd6a46ed28b967f322ca95abae47ce5e744e796aa0c42"}}, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0xa, 0x5, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098f3d1) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) process_vm_readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/191, 0xbf}, {0x0}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000001d80)=""/4106, 0x100a}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/177, 0xb1}], 0x7, &(0x7f0000000680), 0x0, 0x0) r6 = pidfd_getfd(r3, r5, 0x0) readlinkat(r6, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x7ffe}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 6.07357772s ago: executing program 5 (id=192): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x80000001}}, 0x30) 5.377632548s ago: executing program 0 (id=193): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) setrlimit(0x2, 0x0) setrlimit(0x8, &(0x7f00000003c0)={0x6, 0xffffffffffffff05}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f0000000140)=0x0) timer_settime(r4, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.44710761s ago: executing program 0 (id=194): getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/146, 0x92) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 3.403817125s ago: executing program 1 (id=195): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000306030000000000000000000000008609000200733200"/42], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x9e, 0x0, 0x3}, 0x28) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x103980, 0x80, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000080800", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x8804) 2.089474985s ago: executing program 1 (id=196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 2.009579961s ago: executing program 5 (id=197): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x300000000000f7) bpf$PROG_LOAD(0x5, 0x0, 0x1298b7cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) keyctl$revoke(0x3, r0) 1.610852555s ago: executing program 5 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000010) 696.437896ms ago: executing program 1 (id=199): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(0x0, 0x4800, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000440), 0x4000) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x2, 0x2}]}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x20, 0x12, 0x70d, 0x70bd2a, 0x25dfdbde, {0x7, 0x0, 0x0, 0x0, 0x20, 0x5d000}}, 0x20}}, 0x20008080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x240440c0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}]}, 0x48}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000180)={0xc, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 84.288650][ T5806] cgroup: Unknown subsys name 'net' [ 84.405033][ T5806] cgroup: Unknown subsys name 'cpuset' [ 84.414611][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.963208][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.051258][ T29] cfg80211: failed to load regulatory.db [ 88.512595][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.532191][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.542489][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.550231][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.552440][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.561186][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.572931][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.573714][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.581460][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.587724][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.594646][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.608769][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.610000][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.617161][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.623267][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.631358][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.638106][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.645671][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.650939][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.658185][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.664798][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.673343][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.681019][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.685973][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.692780][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.706840][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.709086][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.723119][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.730479][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.761830][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.530525][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.630168][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.652537][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.786583][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.872918][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.935708][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.943199][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.950455][ T5825] bridge_slave_0: entered allmulticast mode [ 89.958214][ T5825] bridge_slave_0: entered promiscuous mode [ 89.986176][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 90.046346][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.054231][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.061685][ T5825] bridge_slave_1: entered allmulticast mode [ 90.069083][ T5825] bridge_slave_1: entered promiscuous mode [ 90.109757][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.116869][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.124676][ T5829] bridge_slave_0: entered allmulticast mode [ 90.132199][ T5829] bridge_slave_0: entered promiscuous mode [ 90.204948][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.212605][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.220993][ T5829] bridge_slave_1: entered allmulticast mode [ 90.228469][ T5829] bridge_slave_1: entered promiscuous mode [ 90.247196][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.254402][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.262109][ T5834] bridge_slave_0: entered allmulticast mode [ 90.269581][ T5834] bridge_slave_0: entered promiscuous mode [ 90.333461][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.343080][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.350420][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.357736][ T5834] bridge_slave_1: entered allmulticast mode [ 90.365255][ T5834] bridge_slave_1: entered promiscuous mode [ 90.379981][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.387093][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.394350][ T5835] bridge_slave_0: entered allmulticast mode [ 90.401881][ T5835] bridge_slave_0: entered promiscuous mode [ 90.417780][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.424924][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.432167][ T5835] bridge_slave_1: entered allmulticast mode [ 90.439789][ T5835] bridge_slave_1: entered promiscuous mode [ 90.461787][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.544128][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.598267][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.605495][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.612921][ T5826] bridge_slave_0: entered allmulticast mode [ 90.620708][ T5826] bridge_slave_0: entered promiscuous mode [ 90.630826][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.642077][ T5825] team0: Port device team_slave_0 added [ 90.664063][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.677261][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.701503][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.711041][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.718210][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.725687][ T5826] bridge_slave_1: entered allmulticast mode [ 90.733225][ T5826] bridge_slave_1: entered promiscuous mode [ 90.754388][ T5825] team0: Port device team_slave_1 added [ 90.770254][ T5836] Bluetooth: hci0: command tx timeout [ 90.775844][ T5836] Bluetooth: hci4: command tx timeout [ 90.776949][ T5139] Bluetooth: hci3: command tx timeout [ 90.781642][ T51] Bluetooth: hci1: command tx timeout [ 90.818173][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.849675][ T51] Bluetooth: hci5: command tx timeout [ 90.849728][ T5139] Bluetooth: hci2: command tx timeout [ 90.865404][ T5829] team0: Port device team_slave_0 added [ 90.896196][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.903470][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.910927][ T5833] bridge_slave_0: entered allmulticast mode [ 90.918399][ T5833] bridge_slave_0: entered promiscuous mode [ 90.951809][ T5829] team0: Port device team_slave_1 added [ 90.958204][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.965369][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.991320][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.004873][ T5834] team0: Port device team_slave_0 added [ 91.011079][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.018560][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.025845][ T5833] bridge_slave_1: entered allmulticast mode [ 91.033713][ T5833] bridge_slave_1: entered promiscuous mode [ 91.042710][ T5835] team0: Port device team_slave_0 added [ 91.063349][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.085639][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.092903][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.119000][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.132138][ T5834] team0: Port device team_slave_1 added [ 91.148559][ T5835] team0: Port device team_slave_1 added [ 91.168909][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.232007][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.254209][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.261371][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.287657][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.299843][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.306781][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.332956][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.345770][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.352803][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.378733][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.404870][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.427378][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.434448][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.460386][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.504810][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.511844][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.537937][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.564238][ T5826] team0: Port device team_slave_0 added [ 91.581299][ T5826] team0: Port device team_slave_1 added [ 91.616124][ T5825] hsr_slave_0: entered promiscuous mode [ 91.622857][ T5825] hsr_slave_1: entered promiscuous mode [ 91.630031][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.636970][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.663248][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.697583][ T5833] team0: Port device team_slave_0 added [ 91.737920][ T5834] hsr_slave_0: entered promiscuous mode [ 91.744615][ T5834] hsr_slave_1: entered promiscuous mode [ 91.751040][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 91.756797][ T5834] Cannot create hsr debugfs directory [ 91.768105][ T5833] team0: Port device team_slave_1 added [ 91.859005][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.866098][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.892189][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.961153][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.968083][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.994128][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.005873][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.012900][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.038858][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.072852][ T5835] hsr_slave_0: entered promiscuous mode [ 92.079407][ T5835] hsr_slave_1: entered promiscuous mode [ 92.085764][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 92.091654][ T5835] Cannot create hsr debugfs directory [ 92.103708][ T5829] hsr_slave_0: entered promiscuous mode [ 92.110502][ T5829] hsr_slave_1: entered promiscuous mode [ 92.116657][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 92.122501][ T5829] Cannot create hsr debugfs directory [ 92.140842][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.147773][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.174112][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.296204][ T5826] hsr_slave_0: entered promiscuous mode [ 92.302806][ T5826] hsr_slave_1: entered promiscuous mode [ 92.308959][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 92.329359][ T5826] Cannot create hsr debugfs directory [ 92.528312][ T5833] hsr_slave_0: entered promiscuous mode [ 92.535053][ T5833] hsr_slave_1: entered promiscuous mode [ 92.541368][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 92.547094][ T5833] Cannot create hsr debugfs directory [ 92.854192][ T5139] Bluetooth: hci3: command tx timeout [ 92.854254][ T5836] Bluetooth: hci4: command tx timeout [ 92.859655][ T5139] Bluetooth: hci0: command tx timeout [ 92.865102][ T51] Bluetooth: hci1: command tx timeout [ 92.929832][ T5836] Bluetooth: hci2: command tx timeout [ 92.935322][ T51] Bluetooth: hci5: command tx timeout [ 93.046276][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.066905][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.077804][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.105583][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.183399][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.202510][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.213476][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.225015][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.323698][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.359091][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.370757][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.404212][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.493040][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.509259][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.525515][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.537802][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.561597][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.630648][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.656478][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.663695][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.707055][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.721695][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.728836][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.738003][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.749175][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.764251][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.787167][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.865597][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.943367][ T5833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.962101][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.969206][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.984290][ T5833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.010534][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.023910][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.031081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.051223][ T5833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.066742][ T5833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.197610][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.295829][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.303016][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.337575][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.344816][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.395348][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.408012][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.513961][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.534741][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.552134][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.559229][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.625016][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.632187][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.646219][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.653384][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.674723][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.681877][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.713874][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.823033][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.874333][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.931634][ T51] Bluetooth: hci0: command tx timeout [ 94.937033][ T51] Bluetooth: hci1: command tx timeout [ 94.943358][ T5836] Bluetooth: hci4: command tx timeout [ 94.943381][ T5139] Bluetooth: hci3: command tx timeout [ 94.953049][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.005346][ T5825] veth0_vlan: entered promiscuous mode [ 95.019809][ T5139] Bluetooth: hci5: command tx timeout [ 95.019922][ T51] Bluetooth: hci2: command tx timeout [ 95.031921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.039094][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.064348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.071497][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.182687][ T5825] veth1_vlan: entered promiscuous mode [ 95.277350][ T5834] veth0_vlan: entered promiscuous mode [ 95.318259][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.346621][ T5834] veth1_vlan: entered promiscuous mode [ 95.463441][ T5825] veth0_macvtap: entered promiscuous mode [ 95.503857][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.531228][ T5825] veth1_macvtap: entered promiscuous mode [ 95.607424][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.656013][ T5834] veth0_macvtap: entered promiscuous mode [ 95.676421][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.703686][ T5834] veth1_macvtap: entered promiscuous mode [ 95.732093][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.741872][ T5835] veth0_vlan: entered promiscuous mode [ 95.752777][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.780280][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789000][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.800728][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.837417][ T5835] veth1_vlan: entered promiscuous mode [ 95.861657][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.917480][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.945456][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.013469][ T5829] veth0_vlan: entered promiscuous mode [ 96.045644][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.113263][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.131023][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.171286][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.179348][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.237596][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258823][ T5835] veth0_macvtap: entered promiscuous mode [ 96.324349][ T5835] veth1_macvtap: entered promiscuous mode [ 96.332410][ T5829] veth1_vlan: entered promiscuous mode [ 96.357024][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.372986][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.481611][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.490890][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.512827][ T346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.527179][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.538913][ T346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.661933][ T346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.672976][ T346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.683797][ T5829] veth0_macvtap: entered promiscuous mode [ 96.695859][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.710562][ T5826] veth0_vlan: entered promiscuous mode [ 96.717203][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.717686][ T346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.734053][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.739673][ T346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.763427][ T5829] veth1_macvtap: entered promiscuous mode [ 96.823263][ T5966] netlink: 5144 bytes leftover after parsing attributes in process `syz.1.7'. [ 96.873020][ T5833] veth0_vlan: entered promiscuous mode [ 96.971938][ T5826] veth1_vlan: entered promiscuous mode [ 96.991821][ T5833] veth1_vlan: entered promiscuous mode [ 97.012288][ T51] Bluetooth: hci3: command tx timeout [ 97.012310][ T5139] Bluetooth: hci1: command tx timeout [ 97.017675][ T51] Bluetooth: hci4: command tx timeout [ 97.017710][ T51] Bluetooth: hci0: command tx timeout [ 97.044609][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.091537][ T5842] Bluetooth: hci2: command tx timeout [ 97.096952][ T51] Bluetooth: hci5: command tx timeout [ 97.148838][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.237292][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.266003][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.275115][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.326140][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.406941][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448228][ T5972] loop3: detected capacity change from 0 to 1024 [ 97.458899][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.477205][ T5968] loop1: detected capacity change from 0 to 40427 [ 97.486355][ T5833] veth0_macvtap: entered promiscuous mode [ 97.507352][ T5972] EXT4-fs: Ignoring removed bh option [ 97.515389][ T5968] F2FS-fs (loop1): invalid crc value [ 97.522890][ T5826] veth0_macvtap: entered promiscuous mode [ 97.535266][ T5972] EXT4-fs: Ignoring removed bh option [ 97.554175][ T5826] veth1_macvtap: entered promiscuous mode [ 97.563717][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.572615][ T5833] veth1_macvtap: entered promiscuous mode [ 97.584389][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.651919][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.662928][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.714692][ T5968] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 97.728798][ T5968] F2FS-fs (loop1): Start checkpoint disabled! [ 97.759948][ T5968] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 97.769567][ T5968] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 97.783054][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.834870][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.929441][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.938745][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.954442][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.970074][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.998946][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.055710][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.073575][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.074958][ T5981] Invalid logical block size (4) [ 98.094354][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.106948][ T58] kworker/u8:4: attempt to access beyond end of device [ 98.106948][ T58] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.147822][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 98.147862][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.147883][ T58] Workqueue: writeback wb_workfn (flush-7:1) [ 98.147941][ T58] Call Trace: [ 98.147952][ T58] [ 98.147965][ T58] dump_stack_lvl+0x100/0x190 [ 98.148023][ T58] f2fs_handle_critical_error+0x5d7/0x970 [ 98.148066][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.148108][ T58] ? f2fs_build_fault_attr+0x53/0x280 [ 98.148175][ T58] f2fs_write_end_io+0xc3f/0xf30 [ 98.148219][ T58] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 98.148267][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.148319][ T58] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 98.148361][ T58] bio_endio+0x7a3/0x910 [ 98.148400][ T58] submit_bio_noacct+0x64c/0x2010 [ 98.148461][ T58] f2fs_submit_write_bio+0x133/0x350 [ 98.148503][ T58] __submit_merged_bio+0x331/0x7b0 [ 98.148550][ T58] __submit_merged_write_cond+0x3fe/0x510 [ 98.148602][ T58] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 98.148654][ T58] ? __pfx___might_resched+0x10/0x10 [ 98.148691][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.148743][ T58] f2fs_write_cache_pages+0x21c0/0x2720 [ 98.148809][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.148851][ T58] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 98.148904][ T58] ? lock_acquire+0x1cf/0x380 [ 98.148962][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149002][ T58] ? lock_acquire+0x1cf/0x380 [ 98.149052][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149109][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149155][ T58] ? unwind_next_frame+0x3c8/0x1ea0 [ 98.149194][ T58] ? ret_from_fork_asm+0x1a/0x30 [ 98.149281][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149323][ T58] ? __lock_acquire+0x4a5/0x2630 [ 98.149377][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149417][ T58] ? rcu_is_watching+0x12/0xc0 [ 98.149459][ T58] f2fs_write_data_pages+0x799/0x16d0 [ 98.149518][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.149583][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149629][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.149686][ T58] do_writepages+0x278/0x600 [ 98.149746][ T58] ? __pfx_do_writepages+0x10/0x10 [ 98.149801][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149846][ T58] __writeback_single_inode+0x164/0x13c0 [ 98.149889][ T58] ? find_held_lock+0x2b/0x80 [ 98.149931][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.149977][ T58] ? __pfx___writeback_single_inode+0x10/0x10 [ 98.150023][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150067][ T58] ? do_raw_spin_unlock+0x145/0x1e0 [ 98.150106][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150161][ T58] writeback_sb_inodes+0x766/0x1c70 [ 98.150221][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150264][ T58] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 98.150307][ T58] ? unwind_next_frame+0x3be/0x1ea0 [ 98.150344][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150438][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150479][ T58] ? rcu_is_watching+0x12/0xc0 [ 98.150513][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150554][ T58] ? queue_io+0x287/0x550 [ 98.150593][ T58] wb_writeback+0x1c0/0xbe0 [ 98.150638][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150695][ T58] ? __pfx_wb_writeback+0x10/0x10 [ 98.150753][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.150796][ T58] ? mark_held_locks+0x40/0x70 [ 98.150850][ T58] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.150906][ T58] wb_workfn+0x142/0xc00 [ 98.150958][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151003][ T58] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 98.151070][ T58] ? __pfx_wb_workfn+0x10/0x10 [ 98.151121][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151176][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151224][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151268][ T58] ? rcu_is_watching+0x12/0xc0 [ 98.151315][ T58] process_one_work+0xa23/0x19a0 [ 98.151370][ T58] ? __pfx_process_one_work+0x10/0x10 [ 98.151403][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151461][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151512][ T58] worker_thread+0x5ef/0xe50 [ 98.151559][ T58] ? __pfx_worker_thread+0x10/0x10 [ 98.151596][ T58] ? kthread+0x13a/0x450 [ 98.151650][ T58] ? __pfx_worker_thread+0x10/0x10 [ 98.151682][ T58] kthread+0x370/0x450 [ 98.151736][ T58] ? __pfx_kthread+0x10/0x10 [ 98.151796][ T58] ret_from_fork+0x754/0xd80 [ 98.151856][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 98.151919][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.151963][ T58] ? __switch_to+0x7b4/0x1120 [ 98.152004][ T58] ? __pfx_kthread+0x10/0x10 [ 98.152064][ T58] ret_from_fork_asm+0x1a/0x30 [ 98.152126][ T58] [ 98.220592][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.369712][ T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.641552][ T5983] loop0: detected capacity change from 0 to 512 [ 98.659829][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 98.673870][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.695507][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.719698][ T5903] usb 4-1: config 0 has no interfaces? [ 98.725659][ T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.735975][ T5983] ======================================================= [ 98.735975][ T5983] WARNING: The mand mount option has been deprecated and [ 98.735975][ T5983] and is ignored by this kernel. Remove the mand [ 98.735975][ T5983] option from the mount to silence this warning. [ 98.735975][ T5983] ======================================================= [ 98.739674][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.790213][ T5983] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.815952][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.834482][ T5983] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.836764][ T5903] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 99.129926][ T34] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.146611][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.223237][ T5903] usb 4-1: Product: syz [ 99.227521][ T5903] usb 4-1: Manufacturer: syz [ 99.285202][ T5903] usb 4-1: SerialNumber: syz [ 99.916445][ T5903] usb 4-1: config 0 descriptor?? [ 100.056578][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.096005][ T346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.131582][ T346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.314912][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.341416][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.368001][ T5991] loop2: detected capacity change from 0 to 128 [ 100.449168][ T5991] xt_hashlimit: size too large, truncated to 1048576 [ 100.521428][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.521457][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.624734][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.624764][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.415977][ T29] usb 4-1: USB disconnect, device number 2 [ 103.192288][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.307335][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.830166][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 103.838301][ T6023] loop0: detected capacity change from 0 to 1024 [ 103.847034][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.867569][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.918020][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.921503][ T6023] EXT4-fs: Ignoring removed bh option [ 103.936032][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.973754][ T29] usb 3-1: config 0 descriptor?? [ 104.009208][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.072746][ T29] hub 3-1:0.0: USB hub found [ 104.227844][ T6023] EXT4-fs error (device loop0): mb_free_blocks:2044: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 104.258325][ T29] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 104.474572][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.605332][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.635318][ T6040] loop0: detected capacity change from 0 to 16 [ 104.656664][ T6040] erofs (device loop0): invalid ishare xattr prefix id 0 [ 104.730757][ T3406] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.895827][ T6025] loop1: detected capacity change from 0 to 40427 [ 104.934133][ T6025] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 104.999287][ T6025] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.062470][ T5896] usb 6-1: unable to get BOS descriptor or descriptor too short [ 105.070651][ T6025] F2FS-fs (loop1): invalid crc value [ 105.083974][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.098659][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.113048][ T5896] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 105.123282][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.131900][ T5896] usb 6-1: Product: syz [ 105.136197][ T5896] usb 6-1: Manufacturer: syz [ 105.141130][ T5896] usb 6-1: SerialNumber: syz [ 105.192072][ T3406] usb 4-1: config 1 interface 0 has no altsetting 0 [ 105.213474][ T5896] usb 6-1: selecting invalid altsetting 1 [ 105.227247][ T3406] usb 4-1: string descriptor 0 read error: -22 [ 105.235989][ T5896] usb 6-1: unit 6 not found! [ 105.241181][ T3406] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 105.278772][ T3406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.419517][ T5896] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 105.453166][ T6049] loop4: detected capacity change from 0 to 256 [ 105.470055][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 105.479803][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 105.521843][ T6025] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.536236][ T29] usb 3-1: USB disconnect, device number 2 [ 105.545314][ T5896] usb 6-1: USB disconnect, device number 2 [ 105.557144][ T6049] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 105.610103][ T6025] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.658308][ T6025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.754291][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.809121][ T3406] samsung 0003:0419:0001.0001: unknown main item tag 0x6 [ 105.838980][ T3406] samsung 0003:0419:0001.0001: item 0 0 0 8 parsing failed [ 105.866450][ T3406] samsung 0003:0419:0001.0001: parse failed [ 105.873057][ T3406] samsung 0003:0419:0001.0001: probe with driver samsung failed with error -22 [ 106.087437][ T3406] usb 4-1: USB disconnect, device number 3 [ 107.985749][ T6067] loop0: detected capacity change from 0 to 128 [ 108.753761][ T6067] EXT4-fs (loop0): Test dummy encryption mode enabled [ 108.966014][ T6067] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.999171][ T6067] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.089938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.098170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.191794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.294207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.302850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.381256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.389446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.703823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.806172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.908652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.260628][ T5835] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.094007][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.110148][ T6076] zonefs (nullb0) ERROR: Not a zoned block device [ 112.207382][ T6084] loop1: detected capacity change from 0 to 512 [ 112.238812][ T6084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.339673][ T29] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 113.301103][ T6084] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.28: invalid indirect mapped block 4294967295 (level 0) [ 113.351581][ T29] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.413866][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.420808][ T6084] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.423791][ T6084] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.28: invalid indirect mapped block 4294967295 (level 1) [ 113.433061][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 113.433174][ C1] EXT4-fs (loop1): initial error at time 1773961554: ext4_free_branches:1020: inode 16 [ 113.433229][ C1] EXT4-fs (loop1): last error at time 1773961554: ext4_free_branches:1020: inode 16 [ 113.555420][ T29] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.605165][ T29] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.667023][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 113.704980][ T29] usb 1-1: Product: syz [ 113.731448][ T29] usb 1-1: Manufacturer: syz [ 113.748320][ T29] usb 1-1: SerialNumber: syz [ 113.786729][ T29] usb 1-1: config 0 descriptor?? [ 114.300822][ T6084] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 114.309387][ T6084] EXT4-fs (loop1): 1 orphan inode deleted [ 114.483083][ T6094] loop5: detected capacity change from 0 to 4096 [ 114.495437][ T29] usb 1-1: selecting invalid altsetting 0 [ 114.524567][ T6084] EXT4-fs (loop1): 1 truncate cleaned up [ 114.957222][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.341648][ T6094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.442531][ T29] usb 1-1: USB disconnect, device number 2 [ 116.551922][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.594038][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.460716][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.837065][ T6149] zonefs (nullb0) ERROR: Not a zoned block device [ 123.031620][ T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.195907][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 123.714586][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.729914][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.758463][ T792] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 123.781087][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.930736][ T792] usb 6-1: config 0 descriptor?? [ 124.129764][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 124.449106][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.469911][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.479482][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.489526][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.498000][ T10] usb 4-1: Product: syz [ 124.502584][ T10] usb 4-1: Manufacturer: syz [ 124.507206][ T10] usb 4-1: SerialNumber: syz [ 124.531659][ T10] usb 4-1: config 0 descriptor?? [ 124.591254][ T10] usb 4-1: selecting invalid altsetting 0 [ 124.639560][ T792] usbhid 6-1:0.0: can't add hid device: -71 [ 124.677524][ T792] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.741727][ T792] usb 6-1: USB disconnect, device number 3 [ 124.882049][ T10] usb 4-1: USB disconnect, device number 4 [ 125.957493][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.56'. [ 127.656389][ T6188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 130.385937][ T6204] netlink: 164 bytes leftover after parsing attributes in process `syz.3.64'. [ 132.270287][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.276776][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.949738][ T792] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 133.154951][ T792] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 133.189680][ T792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.217416][ T792] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.252590][ T792] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.294870][ T792] usb 4-1: Product: syz [ 133.309779][ T792] usb 4-1: Manufacturer: syz [ 133.326200][ T792] usb 4-1: SerialNumber: syz [ 133.355682][ T792] usb 4-1: config 0 descriptor?? [ 133.403423][ T792] usb 4-1: selecting invalid altsetting 0 [ 133.500453][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.606764][ T792] usb 4-1: USB disconnect, device number 5 [ 133.781220][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 133.806826][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.906238][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.960908][ T5896] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 133.974246][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.086859][ T5896] usb 2-1: config 0 descriptor?? [ 136.379264][ T5896] usb 2-1: can't set config #0, error -71 [ 136.408630][ T5896] usb 2-1: USB disconnect, device number 2 [ 137.299682][ T5896] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 137.753106][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.709750][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 138.760170][ T5896] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 138.834925][ T5896] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 58, changing to 4 [ 138.901491][ T5896] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 138.939796][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.182818][ T5896] usb 4-1: Product: syz [ 139.269938][ T6245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.899861][ T5896] usb 4-1: Manufacturer: syz [ 139.904511][ T5896] usb 4-1: SerialNumber: syz [ 140.299381][ T5896] usb 4-1: can't set config #1, error -71 [ 140.351565][ T6247] netlink: 164 bytes leftover after parsing attributes in process `syz.1.80'. [ 142.110634][ T5896] usb 4-1: USB disconnect, device number 6 [ 143.742092][ T6259] loop5: detected capacity change from 0 to 512 [ 143.881133][ T6259] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #16: comm syz.5.78: invalid indirect mapped block 4294967295 (level 0) [ 143.943180][ T6259] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 143.949669][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 143.965554][ C0] EXT4-fs (loop5): initial error at time 1773961584: ext4_free_branches:1020: inode 16 [ 143.975261][ C0] EXT4-fs (loop5): last error at time 1773961584: ext4_free_branches:1020: inode 16 [ 143.988502][ T6259] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #16: comm syz.5.78: invalid indirect mapped block 4294967295 (level 1) [ 144.060509][ T6259] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.411355][ T6259] EXT4-fs (loop5): 1 orphan inode deleted [ 144.591554][ T6259] EXT4-fs (loop5): 1 truncate cleaned up [ 144.608796][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.649383][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.670394][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.699174][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.718906][ T6259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.750196][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.849748][ T6264] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 145.093587][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.459680][ T29] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 145.611907][ T29] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.629864][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.644184][ T29] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.653446][ T29] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.661969][ T29] usb 4-1: Product: syz [ 145.666243][ T29] usb 4-1: Manufacturer: syz [ 145.671107][ T29] usb 4-1: SerialNumber: syz [ 145.679854][ T29] usb 4-1: config 0 descriptor?? [ 145.689707][ T6010] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 145.691731][ T29] usb 4-1: selecting invalid altsetting 0 [ 145.942162][ T6010] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.195437][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 146.221935][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 146.320375][ T6010] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.329477][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.822329][ T6010] usb 6-1: Product: syz [ 146.826535][ T6010] usb 6-1: Manufacturer: syz [ 146.858114][ T51] Bluetooth: hci6: command tx timeout [ 146.874061][ T6010] usb 6-1: SerialNumber: syz [ 146.921183][ T6010] usb 6-1: config 0 descriptor?? [ 146.942162][ T6010] usb 6-1: selecting invalid altsetting 0 [ 147.273908][ T6286] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 147.588475][ T792] usb 4-1: USB disconnect, device number 7 [ 148.155849][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.207358][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.234148][ T6269] bridge_slave_0: entered allmulticast mode [ 148.287950][ T6269] bridge_slave_0: entered promiscuous mode [ 148.368809][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.398596][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.413320][ T6269] bridge_slave_1: entered allmulticast mode [ 148.441379][ T6269] bridge_slave_1: entered promiscuous mode [ 148.524188][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.558169][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.641557][ T6269] team0: Port device team_slave_0 added [ 148.660867][ T6269] team0: Port device team_slave_1 added [ 148.692513][ T6285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.958308][ T51] Bluetooth: hci6: command tx timeout [ 149.197730][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.216175][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.301704][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.338419][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.355193][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.390805][ T6285] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.506614][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.524361][ T6285] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.649667][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.715472][ T6285] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.724228][ T6285] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 150.156690][ T6285] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 150.165896][ T6269] hsr_slave_0: entered promiscuous mode [ 150.174274][ T6285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.180088][ T6269] hsr_slave_1: entered promiscuous mode [ 150.192032][ T6285] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.469285][ T6269] debugfs: 'hsr0' already exists in 'hsr' [ 150.499849][ T6269] Cannot create hsr debugfs directory [ 150.629519][ T6285] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.660243][ T6285] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 150.710757][ T6285] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 150.845840][ T6285] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 151.019859][ T51] Bluetooth: hci6: command tx timeout [ 151.405972][ T6285] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.452089][ T6285] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.526655][ T6285] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.553778][ T6285] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 151.579783][ T6285] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 151.618588][ T6285] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 151.730868][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.737011][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.223587][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.691395][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 152.801005][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.850750][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.899787][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.923250][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.931084][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.425783][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.505177][ T5928] usb 6-1: USB disconnect, device number 4 [ 153.579745][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 153.811086][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.819441][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.943416][ T83] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.289931][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.687549][ T83] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.776824][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 154.951326][ T83] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.020802][ T5842] Bluetooth: hci2: command tx timeout [ 155.203522][ T6269] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.282459][ T6269] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.521971][ T83] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.570017][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.682555][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 155.986755][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.015250][ T6269] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.039784][ T6269] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.532368][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.863555][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 157.092514][ T5842] Bluetooth: hci2: command tx timeout [ 157.690361][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.965643][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 158.270026][ T83] bridge_slave_1: left allmulticast mode [ 158.297935][ T83] bridge_slave_1: left promiscuous mode [ 158.331294][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.851018][ T83] bridge_slave_0: left allmulticast mode [ 158.856733][ T83] bridge_slave_0: left promiscuous mode [ 158.913739][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.189693][ T5842] Bluetooth: hci2: command tx timeout [ 161.290962][ T5842] Bluetooth: hci2: command tx timeout [ 161.307893][ T792] IPVS: starting estimator thread 0... [ 161.589795][ T6388] IPVS: using max 30 ests per chain, 72000 per kthread [ 164.234116][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.335167][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.366110][ T83] bond0 (unregistering): Released all slaves [ 168.177076][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.240671][ T6321] chnl_net:caif_netlink_parms(): no params data found [ 169.917537][ T83] hsr_slave_0: left promiscuous mode [ 169.933748][ T83] hsr_slave_1: left promiscuous mode [ 169.942444][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.972547][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.289924][ T5928] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 170.520676][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.528092][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.690965][ T5928] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.711435][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.842595][ T83] veth1_macvtap: left promiscuous mode [ 170.848305][ T83] veth0_macvtap: left promiscuous mode [ 170.879785][ T83] veth1_vlan: left promiscuous mode [ 170.890085][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.911896][ T83] veth0_vlan: left promiscuous mode [ 170.917848][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.959699][ T5928] usb 4-1: Product: syz [ 170.963891][ T5928] usb 4-1: Manufacturer: syz [ 170.968490][ T5928] usb 4-1: SerialNumber: syz [ 171.030498][ T5928] usb 4-1: config 0 descriptor?? [ 171.071279][ T6460] process 'syz.1.126' launched './file2' with NULL argv: empty string added [ 171.102824][ T5928] usb 4-1: selecting invalid altsetting 0 [ 172.158594][ T6469] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.580603][ T6472] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 173.616078][ T5928] usb 4-1: USB disconnect, device number 8 [ 175.516476][ T83] team0 (unregistering): Port device team_slave_1 removed [ 175.563055][ T83] team0 (unregistering): Port device team_slave_0 removed [ 176.045535][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.070310][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.094779][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.127952][ T6321] bridge_slave_0: entered allmulticast mode [ 176.160532][ T6321] bridge_slave_0: entered promiscuous mode [ 176.349521][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.356703][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.458571][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.494677][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.537973][ T6321] bridge_slave_1: entered allmulticast mode [ 176.600282][ T6321] bridge_slave_1: entered promiscuous mode [ 176.642233][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.649411][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.562837][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.579517][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.657709][ T6321] team0: Port device team_slave_0 added [ 180.075505][ T6321] team0: Port device team_slave_1 added [ 181.112249][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.119213][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.145644][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.182038][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.189005][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.349694][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.068124][ T6269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.124131][ T6269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.233995][ T6321] hsr_slave_0: entered promiscuous mode [ 183.257742][ T6321] hsr_slave_1: entered promiscuous mode [ 183.459176][ T6321] debugfs: 'hsr0' already exists in 'hsr' [ 183.465023][ T6321] Cannot create hsr debugfs directory [ 184.477998][ T83] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.514489][ T83] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.697371][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.699772][ T5928] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.712615][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.726025][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.736552][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.746071][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.989838][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 186.033876][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.091228][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.129860][ T5928] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 186.169536][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.230473][ T5928] usb 6-1: config 0 descriptor?? [ 186.503836][ T83] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.796468][ T5928] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 186.845555][ T5928] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 187.000127][ T5928] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 187.040294][ T5928] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 187.516096][ T83] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.811329][ T51] Bluetooth: hci1: command tx timeout [ 187.855932][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.110574][ T10] usb 6-1: USB disconnect, device number 5 [ 189.713494][ T83] bridge_slave_1: left allmulticast mode [ 189.743317][ T83] bridge_slave_1: left promiscuous mode [ 189.900872][ T51] Bluetooth: hci1: command tx timeout [ 190.247392][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.337449][ T83] bridge_slave_0: left allmulticast mode [ 190.355748][ T6569] netlink: 'syz.5.142': attribute type 1 has an invalid length. [ 190.394581][ T83] bridge_slave_0: left promiscuous mode [ 190.436330][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.985807][ T51] Bluetooth: hci1: command tx timeout [ 193.813621][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.829767][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.125303][ T51] Bluetooth: hci1: command tx timeout [ 194.273203][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.367713][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.443196][ T83] bond0 (unregistering): Released all slaves [ 194.715319][ T6321] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.746553][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 196.962117][ T6321] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 197.275573][ T6321] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.384753][ T6321] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 197.399744][ T5903] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 197.480504][ T6618] Zero length message leads to an empty skb [ 197.649991][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 197.670290][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.709707][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.719522][ T5903] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 198.015485][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.159194][ T5903] usb 1-1: config 0 descriptor?? [ 198.635373][ T5903] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 198.751605][ T5903] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 198.824213][ T5903] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 198.833093][ T5903] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -32 [ 199.158986][ T83] hsr_slave_0: left promiscuous mode [ 199.449949][ T83] hsr_slave_1: left promiscuous mode [ 199.479388][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.525281][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.569087][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.585978][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.639171][ T83] veth1_macvtap: left promiscuous mode [ 199.654777][ T83] veth0_macvtap: left promiscuous mode [ 199.676463][ T83] veth1_vlan: left promiscuous mode [ 199.688519][ T83] veth0_vlan: left promiscuous mode [ 200.187661][ T5928] usb 1-1: USB disconnect, device number 3 [ 201.536726][ T83] team0 (unregistering): Port device team_slave_1 removed [ 202.111934][ T83] team0 (unregistering): Port device team_slave_0 removed [ 202.322500][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.335625][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.343599][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.353830][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.363342][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.181606][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.188797][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.249957][ T6535] bridge_slave_0: entered allmulticast mode [ 203.271082][ T6535] bridge_slave_0: entered promiscuous mode [ 203.334677][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.377452][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.399889][ T6535] bridge_slave_1: entered allmulticast mode [ 203.414963][ T6535] bridge_slave_1: entered promiscuous mode [ 203.642318][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.503343][ T5842] Bluetooth: hci5: command tx timeout [ 204.612111][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.250092][ T6668] loop0: detected capacity change from 0 to 512 [ 205.463946][ T6666] tipc: Started in network mode [ 205.469336][ T6666] tipc: Node identity 460ee98ce0c9, cluster identity 4711 [ 205.479580][ T6666] tipc: Enabled bearer , priority 0 [ 205.540263][ T58] Bluetooth: hci7: Frame reassembly failed (-84) [ 205.559552][ T6535] team0: Port device team_slave_0 added [ 205.627341][ T6668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.645034][ T6535] team0: Port device team_slave_1 added [ 205.859860][ T6668] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.911400][ T6666] tipc: Resetting bearer [ 206.070491][ T6660] tipc: Disabling bearer [ 206.212376][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.219371][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.357230][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.529819][ T51] Bluetooth: hci5: command tx timeout [ 206.583361][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.163'. [ 206.608871][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.630378][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.750929][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.998291][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.151981][ T6535] hsr_slave_0: entered promiscuous mode [ 207.189333][ T6535] hsr_slave_1: entered promiscuous mode [ 207.220669][ T6535] debugfs: 'hsr0' already exists in 'hsr' [ 207.229405][ T6535] Cannot create hsr debugfs directory [ 207.569738][ T5842] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 208.810931][ T51] Bluetooth: hci5: command tx timeout [ 209.855003][ T6646] chnl_net:caif_netlink_parms(): no params data found [ 210.910637][ T51] Bluetooth: hci5: command tx timeout [ 211.965932][ T6718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.305042][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.315370][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.435774][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.444810][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.452806][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.489945][ T51] Bluetooth: hci6: command tx timeout [ 217.572802][ T51] Bluetooth: hci6: command tx timeout [ 217.692761][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.709843][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.749967][ T6646] bridge_slave_0: entered allmulticast mode [ 217.758027][ T6646] bridge_slave_0: entered promiscuous mode [ 217.800615][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.807740][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.839947][ T6646] bridge_slave_1: entered allmulticast mode [ 217.863228][ T6646] bridge_slave_1: entered promiscuous mode [ 218.084083][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.177079][ T6750] tipc: Started in network mode [ 218.189839][ T6750] tipc: Node identity be559e187266, cluster identity 4711 [ 218.240347][ T6750] tipc: Enabled bearer , priority 0 [ 218.310200][ T6748] syzkaller0: entered promiscuous mode [ 218.350439][ T6748] syzkaller0: entered allmulticast mode [ 218.382658][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.429691][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 218.545705][ T6535] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.592246][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 218.606036][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.659746][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.689901][ T5928] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 218.698958][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.737343][ T6646] team0: Port device team_slave_0 added [ 218.744404][ T5928] usb 2-1: config 0 descriptor?? [ 218.815844][ T6535] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.887129][ T6646] team0: Port device team_slave_1 added [ 219.018073][ T6747] tipc: Resetting bearer [ 219.165175][ T5928] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 219.233120][ T5928] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 219.295353][ T6747] tipc: Disabling bearer [ 219.420578][ T5928] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 219.428246][ T5928] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -32 [ 219.660563][ T51] Bluetooth: hci6: command tx timeout [ 219.734322][ T6535] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.781211][ T6535] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 220.001159][ T5896] tipc: Node number set to 3425934872 [ 220.107131][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.120497][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.206254][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.267109][ T6725] chnl_net:caif_netlink_parms(): no params data found [ 220.335167][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.399050][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.482568][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.677925][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.956856][ T6790] loop0: detected capacity change from 0 to 16 [ 220.971116][ T6790] erofs (device loop0): invalid ishare xattr prefix id 0 [ 221.097314][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.227272][ T10] usb 2-1: USB disconnect, device number 3 [ 221.361764][ T6646] hsr_slave_0: entered promiscuous mode [ 221.368479][ T6646] hsr_slave_1: entered promiscuous mode [ 221.397046][ T6646] debugfs: 'hsr0' already exists in 'hsr' [ 221.405087][ T6646] Cannot create hsr debugfs directory [ 221.732387][ T51] Bluetooth: hci6: command tx timeout [ 222.779467][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.005288][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.022397][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.031484][ T6725] bridge_slave_0: entered allmulticast mode [ 223.057459][ T6725] bridge_slave_0: entered promiscuous mode [ 223.155029][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.184568][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.209824][ T6725] bridge_slave_1: entered allmulticast mode [ 223.236135][ T6725] bridge_slave_1: entered promiscuous mode [ 223.325807][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.951462][ T6811] zonefs (nullb0) ERROR: Not a zoned block device [ 224.812267][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.822718][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.286064][ T6725] team0: Port device team_slave_0 added [ 226.297067][ T6725] team0: Port device team_slave_1 added [ 226.688022][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.706097][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.732996][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.791586][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.985203][ T83] bridge_slave_1: left allmulticast mode [ 227.010712][ T83] bridge_slave_1: left promiscuous mode [ 227.024446][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.084913][ T83] bridge_slave_0: left allmulticast mode [ 227.118863][ T83] bridge_slave_0: left promiscuous mode [ 227.142662][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.224225][ T83] bridge_slave_1: left allmulticast mode [ 227.248897][ T83] bridge_slave_1: left promiscuous mode [ 227.274188][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.324632][ T83] bridge_slave_0: left allmulticast mode [ 227.353833][ T83] bridge_slave_0: left promiscuous mode [ 227.384518][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.486194][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.508726][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.525505][ T83] bond0 (unregistering): Released all slaves [ 229.716785][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.737400][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.901555][ T83] bond0 (unregistering): Released all slaves [ 229.968183][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.983358][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.011716][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.156325][ T6836] tipc: Started in network mode [ 230.161996][ T6836] tipc: Node identity 5ee135a2f159, cluster identity 4711 [ 230.195244][ T6836] tipc: Enabled bearer , priority 0 [ 230.227541][ T6838] syzkaller0: entered promiscuous mode [ 230.238126][ T6838] syzkaller0: entered allmulticast mode [ 230.469729][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.493461][ T6838] tipc: Resetting bearer [ 230.568669][ T6838] tipc: Disabling bearer [ 230.591782][ T6725] hsr_slave_0: entered promiscuous mode [ 230.617539][ T6725] hsr_slave_1: entered promiscuous mode [ 230.647001][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 230.652447][ T6725] debugfs: 'hsr0' already exists in 'hsr' [ 230.658628][ T6725] Cannot create hsr debugfs directory [ 230.671445][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.688750][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.718494][ T5928] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 230.741902][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.743318][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.803284][ T5928] usb 6-1: config 0 descriptor?? [ 230.916355][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.923526][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.311933][ T5928] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 231.318857][ T5928] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 232.194388][ T5928] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 232.219583][ T5928] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -32 [ 232.306234][ T83] hsr_slave_0: left promiscuous mode [ 232.312266][ T83] hsr_slave_1: left promiscuous mode [ 232.327032][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.336406][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.553816][ T83] hsr_slave_0: left promiscuous mode [ 232.570935][ T83] hsr_slave_1: left promiscuous mode [ 232.576908][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.701969][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.718422][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.734721][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.774733][ T83] veth1_macvtap: left promiscuous mode [ 232.786571][ T83] veth0_macvtap: left promiscuous mode [ 232.799155][ T83] veth1_vlan: left promiscuous mode [ 232.814694][ T83] veth0_vlan: left promiscuous mode [ 233.539405][ T5903] usb 6-1: USB disconnect, device number 6 [ 233.651123][ T6873] zonefs (nullb0) ERROR: Not a zoned block device [ 234.598319][ T6876] loop5: detected capacity change from 0 to 16 [ 234.766138][ T6876] erofs (device loop5): invalid ishare xattr prefix id 0 [ 236.379159][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 237.290298][ T83] team0 (unregistering): Port device team_slave_1 removed [ 237.337717][ T83] team0 (unregistering): Port device team_slave_0 removed [ 239.611519][ T83] team0 (unregistering): Port device team_slave_1 removed [ 239.670214][ T83] team0 (unregistering): Port device team_slave_0 removed [ 240.421981][ T6902] Oops: general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] SMP KASAN NOPTI [ 240.434098][ T6902] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 240.442510][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 240.451712][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.461765][ T6902] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 240.467842][ T6902] Code: 40 04 00 f3 f3 f3 65 48 8b 05 8e a9 3c 12 48 89 44 24 70 31 c0 e8 da 84 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 240.487457][ T6902] RSP: 0018:ffffc90003537ba0 EFLAGS: 00010216 [ 240.493531][ T6902] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc900126a5000 [ 240.501500][ T6902] RDX: 0000000000080000 RSI: ffffffff81d12686 RDI: 0000000000000000 [ 240.509470][ T6902] RBP: 1ffff920006a6f77 R08: 0000000000000007 R09: 0000000000000000 [ 240.517441][ T6902] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff81d12220 [ 240.525416][ T6902] R13: ffff888031fc7840 R14: dffffc0000000000 R15: 00000000000009e0 [ 240.533390][ T6902] FS: 00007fab342b86c0(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 240.542321][ T6902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.548904][ T6902] CR2: 000000110c46663e CR3: 000000003db7b000 CR4: 0000000000350ef0 [ 240.556880][ T6902] Call Trace: [ 240.560158][ T6902] [ 240.563089][ T6902] ? __pfx_task_work_cancel_match+0x10/0x10 [ 240.568993][ T6902] ? __rcu_read_unlock+0x26a/0x5e0 [ 240.574127][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.579777][ T6902] ? rcu_is_watching+0x12/0xc0 [ 240.584550][ T6902] task_work_cancel+0x23/0x30 [ 240.589230][ T6902] landlock_restrict_sibling_threads+0xafe/0x1280 [ 240.595667][ T6902] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 240.602531][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.608194][ T6902] ? __pfx___might_resched+0x10/0x10 [ 240.613483][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.619126][ T6902] ? landlock_merge_ruleset+0x213/0x830 [ 240.624681][ T6902] __do_sys_landlock_restrict_self+0x5c9/0x9e0 [ 240.630865][ T6902] do_syscall_64+0x106/0xf80 [ 240.635476][ T6902] ? irqentry_exit+0x138/0x670 [ 240.640260][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.646159][ T6902] RIP: 0033:0x7fab3339c799 [ 240.650571][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.670183][ T6902] RSP: 002b:00007fab342b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 240.678601][ T6902] RAX: ffffffffffffffda RBX: 00007fab33616180 RCX: 00007fab3339c799 [ 240.686567][ T6902] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000007 [ 240.694532][ T6902] RBP: 00007fab33432c99 R08: 0000000000000000 R09: 0000000000000000 [ 240.702499][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.710465][ T6902] R13: 00007fab33616218 R14: 00007fab33616180 R15: 00007ffdca9fc728 [ 240.718444][ T6902] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 240.721451][ T6902] Modules linked in: [ 240.726097][ T6902] ---[ end trace 0000000000000000 ]--- [ 240.742890][ T6902] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 240.749631][ T6902] Code: 40 04 00 f3 f3 f3 65 48 8b 05 8e a9 3c 12 48 89 44 24 70 31 c0 e8 da 84 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 241.582885][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.590032][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.674086][ T6902] RSP: 0018:ffffc90003537ba0 EFLAGS: 00010216 [ 241.860075][ T6902] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc900126a5000 [ 241.868104][ T6902] RDX: 0000000000080000 RSI: ffffffff81d12686 RDI: 0000000000000000 [ 242.189857][ T6902] RBP: 1ffff920006a6f77 R08: 0000000000000007 R09: 0000000000000000 [ 242.198224][ T6902] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff81d12220 [ 242.579797][ T6902] R13: ffff888031fc7840 R14: dffffc0000000000 R15: 00000000000009e0 [ 242.587833][ T6902] FS: 00007fab342b86c0(0000) GS:ffff888124343000(0000) knlGS:0000000000000000 [ 242.666971][ T6902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.706190][ T6902] CR2: 00007f5003f20eb0 CR3: 000000003db7b000 CR4: 0000000000350ef0 [ 242.748131][ T6902] Kernel panic - not syncing: Fatal exception [ 242.755107][ T6902] Kernel Offset: disabled [ 242.759422][ T6902] Rebooting in 86400 seconds..