last executing test programs: 9.777656178s ago: executing program 3 (id=413): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x1, 0x403, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8, 0x9, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 7.870267019s ago: executing program 1 (id=414): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r2) 7.20256302s ago: executing program 1 (id=416): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_usbip_server_init(0x1) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902"], 0x0) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 7.093870224s ago: executing program 3 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9, 0x2c1, &(0x7f0000001880)="$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") openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 6.757801734s ago: executing program 3 (id=420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 5.665996389s ago: executing program 2 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) 5.553299743s ago: executing program 2 (id=423): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0xff, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x60}], 0x49249249249253f, 0x4080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r6) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x2, 0x2, 0x7, 0x54b267a2, '\x00', 0x4}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/vmcoreinfo', 0x101042, 0x80) write$binfmt_elf64(r9, &(0x7f0000000140)=ANY=[@ANYRESHEX=r9, @ANYRES8=r9], 0x98) 4.570268304s ago: executing program 2 (id=426): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x1, 0x403, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8, 0x9, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 4.347564251s ago: executing program 2 (id=427): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe4) setresuid(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) socket$inet_icmp(0x2, 0x2, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x7ffff000, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.248317466s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9, 0x2c1, &(0x7f0000001880)="$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") openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 3.057963372s ago: executing program 1 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70b922, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}}, 0x4890) 2.915750747s ago: executing program 0 (id=430): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_ethernet(0x884, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x84e, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f"}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x119) getgid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xa8c05c84}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101101, 0x100) syz_fuse_handle_req(r3, &(0x7f000000c400)="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", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r2, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) close_range(r0, 0xffffffffffffffff, 0x0) 2.217092119s ago: executing program 1 (id=431): connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e22, 0x8, @empty, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x7}, 0x4008000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) 1.979389877s ago: executing program 2 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1.337960947s ago: executing program 0 (id=433): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r2) 1.215074251s ago: executing program 1 (id=434): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0xff, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x60}], 0x49249249249253f, 0x4080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r6) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x2, 0x2, 0x7, 0x54b267a2, '\x00', 0x4}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/vmcoreinfo', 0x101042, 0x80) write$binfmt_elf64(r9, &(0x7f0000000140)=ANY=[@ANYRESHEX=r9, @ANYRES8=r9], 0x98) 1.085547625s ago: executing program 0 (id=435): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 724.238367ms ago: executing program 3 (id=436): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x8, 0x6, 0xffffffff}, 0x10) 485.903074ms ago: executing program 3 (id=437): socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) open(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x181040, 0x2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x4ce903, 0x8e) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) 444.397956ms ago: executing program 3 (id=438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 407.538457ms ago: executing program 0 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r0, 0x43233000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0xa, 0x80}, {0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x3}}, 0xe8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) 378.604218ms ago: executing program 2 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 47.763938ms ago: executing program 0 (id=441): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=442): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000480)={0x38, 0x3, 0x30, 0x1fdf, 0x3, 0x4, 0x8, 0x9, 0x1d, 0x10000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r1, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRES64=r6], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="508f2de06a446aa488b8dd990414000000100001000000000000003c000000120a01020000000000000000020000040900020073797a310000000008000440000000000900010073797a300000000008000340000000001400b700001100"], 0x64}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x30, 0x320, 0x258, 0x3ad, 0x10000b1c, 0x10, 0x0, {0x0, 0x0, 0x5}, {0xffffffd0, 0x0, 0xffffffff}, {0x7}, {}, 0x1, 0x2, 0x9f29, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x5, 0x80, 0x7, 0xfffffffd, 0x2c, 0x0, 0x0, 0xc}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 77.552611][ T5764] cgroup: Unknown subsys name 'net' [ 77.674255][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.309850][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.449314][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.466293][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.473835][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.496917][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.511535][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.519261][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.526593][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.535835][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.540714][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.551001][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.558387][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.559033][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.576716][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.584130][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.593076][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.597499][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.604729][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.617450][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.624677][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.631936][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.641928][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.658251][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.668393][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.689729][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.149302][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.200235][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 82.226682][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 82.271295][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 82.424595][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.432736][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.440584][ T5776] bridge_slave_0: entered allmulticast mode [ 82.447876][ T5776] bridge_slave_0: entered promiscuous mode [ 82.458267][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.465645][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.472830][ T5776] bridge_slave_1: entered allmulticast mode [ 82.480478][ T5776] bridge_slave_1: entered promiscuous mode [ 82.591814][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.599150][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.606728][ T5782] bridge_slave_0: entered allmulticast mode [ 82.613669][ T5782] bridge_slave_0: entered promiscuous mode [ 82.621916][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.629875][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.638922][ T5780] bridge_slave_0: entered allmulticast mode [ 82.646505][ T5780] bridge_slave_0: entered promiscuous mode [ 82.658473][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.670881][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.681078][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.688523][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.696447][ T5781] bridge_slave_0: entered allmulticast mode [ 82.703448][ T5781] bridge_slave_0: entered promiscuous mode [ 82.712170][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.719777][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.727283][ T5782] bridge_slave_1: entered allmulticast mode [ 82.734353][ T5782] bridge_slave_1: entered promiscuous mode [ 82.751500][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.761509][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.769003][ T5780] bridge_slave_1: entered allmulticast mode [ 82.776728][ T5780] bridge_slave_1: entered promiscuous mode [ 82.803407][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.810704][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.818676][ T5781] bridge_slave_1: entered allmulticast mode [ 82.826686][ T5781] bridge_slave_1: entered promiscuous mode [ 82.858010][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.870918][ T5776] team0: Port device team_slave_0 added [ 82.902532][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.924769][ T5776] team0: Port device team_slave_1 added [ 82.965098][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.989396][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.999531][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.006883][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.033025][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.049164][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.062718][ T5782] team0: Port device team_slave_0 added [ 83.071786][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.084635][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.091868][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.118001][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.154980][ T5782] team0: Port device team_slave_1 added [ 83.222154][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.229474][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.255649][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.268796][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.276224][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.302420][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.327264][ T5780] team0: Port device team_slave_0 added [ 83.342966][ T5781] team0: Port device team_slave_0 added [ 83.364252][ T5780] team0: Port device team_slave_1 added [ 83.372586][ T5781] team0: Port device team_slave_1 added [ 83.396840][ T5776] hsr_slave_0: entered promiscuous mode [ 83.403524][ T5776] hsr_slave_1: entered promiscuous mode [ 83.454046][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.461163][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.487387][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.501652][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.508726][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.535112][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.547157][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.554160][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.580462][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.621631][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.628252][ T51] Bluetooth: hci0: command tx timeout [ 83.634368][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.660774][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.683518][ T5782] hsr_slave_0: entered promiscuous mode [ 83.690024][ T5782] hsr_slave_1: entered promiscuous mode [ 83.695775][ T51] Bluetooth: hci1: command tx timeout [ 83.696775][ T5784] Bluetooth: hci3: command tx timeout [ 83.708322][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.716407][ T5782] Cannot create hsr debugfs directory [ 83.775636][ T5784] Bluetooth: hci2: command tx timeout [ 83.795110][ T5780] hsr_slave_0: entered promiscuous mode [ 83.802124][ T5780] hsr_slave_1: entered promiscuous mode [ 83.808815][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.816496][ T5780] Cannot create hsr debugfs directory [ 83.958739][ T5781] hsr_slave_0: entered promiscuous mode [ 83.965148][ T5781] hsr_slave_1: entered promiscuous mode [ 83.971655][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.979337][ T5781] Cannot create hsr debugfs directory [ 84.297180][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.313499][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.334441][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.352205][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.424424][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.448985][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.466360][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.477832][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.582654][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.592937][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.604492][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.624021][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.728983][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.743300][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.754917][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.778259][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.799499][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.838770][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.869190][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.876678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.924673][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.931872][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.974728][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.991249][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.069137][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.091483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.098755][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.119903][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.136547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.144176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.176114][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.183280][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.215028][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.222272][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.324192][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.389001][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.441023][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.448267][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.508349][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.548580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.556117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.685307][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.700812][ T5784] Bluetooth: hci0: command tx timeout [ 85.738142][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.777744][ T5784] Bluetooth: hci1: command tx timeout [ 85.777754][ T51] Bluetooth: hci3: command tx timeout [ 85.857232][ T5784] Bluetooth: hci2: command tx timeout [ 85.870309][ T5776] veth0_vlan: entered promiscuous mode [ 85.907215][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.923003][ T5776] veth1_vlan: entered promiscuous mode [ 85.990443][ T5781] veth0_vlan: entered promiscuous mode [ 86.035148][ T5776] veth0_macvtap: entered promiscuous mode [ 86.053659][ T5781] veth1_vlan: entered promiscuous mode [ 86.074956][ T5776] veth1_macvtap: entered promiscuous mode [ 86.170911][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.204105][ T5781] veth0_macvtap: entered promiscuous mode [ 86.215053][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.242366][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.254255][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.264675][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.277244][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.286549][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.301029][ T5781] veth1_macvtap: entered promiscuous mode [ 86.340822][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.382760][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.397826][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.409863][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.473505][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.489588][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.502400][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.516368][ T5782] veth0_vlan: entered promiscuous mode [ 86.540939][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.549964][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.559163][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.568196][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.602867][ T5782] veth1_vlan: entered promiscuous mode [ 86.631371][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.647095][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.709428][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.738026][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.768536][ T5780] veth0_vlan: entered promiscuous mode [ 86.828401][ T5780] veth1_vlan: entered promiscuous mode [ 86.849888][ T5782] veth0_macvtap: entered promiscuous mode [ 86.882860][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.902614][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.916388][ T5782] veth1_macvtap: entered promiscuous mode [ 87.022622][ T5780] veth0_macvtap: entered promiscuous mode [ 87.035715][ T5840] syz.2.3[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.046943][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.058904][ T5780] veth1_macvtap: entered promiscuous mode [ 87.068188][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.090480][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.106021][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.116249][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.126891][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140170][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.194905][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.213386][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.232849][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.244931][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.274572][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.280012][ T5840] loop2: detected capacity change from 0 to 4096 [ 87.305276][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.310520][ T5840] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.336439][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.377881][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.403415][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.434475][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.450604][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.470317][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.504339][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.535069][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.574939][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.594215][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.648120][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.665681][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.666714][ T5840] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.681604][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.695028][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.708907][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.721398][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.733131][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.748005][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.758109][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.768616][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.776711][ T5784] Bluetooth: hci0: command tx timeout [ 87.783973][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.796854][ T5840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.855915][ T5784] Bluetooth: hci1: command tx timeout [ 87.861399][ T5784] Bluetooth: hci3: command tx timeout [ 87.935569][ T5784] Bluetooth: hci2: command tx timeout [ 88.130870][ T5840] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 88.240856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.283024][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.336668][ T5858] loop0: detected capacity change from 0 to 512 [ 88.382331][ T5858] EXT4-fs: Ignoring removed i_version option [ 88.390681][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.420561][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.506044][ T5858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.531849][ T5850] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 88.536235][ T5858] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.572668][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.599581][ T5850] overlayfs: failed index dir cleanup (-512) [ 88.614601][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.622447][ T5850] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 88.779120][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.928374][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.966867][ T5858] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.996400][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.069123][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.133437][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.277938][ T5872] netlink: 'syz.2.7': attribute type 8 has an invalid length. [ 89.482968][ T5873] loop3: detected capacity change from 0 to 4096 [ 89.494585][ T5873] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.536359][ T5873] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.595151][ T5873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.880164][ T5784] Bluetooth: hci0: command tx timeout [ 89.936614][ T5784] Bluetooth: hci1: command tx timeout [ 89.939780][ T51] Bluetooth: hci3: command tx timeout [ 90.016865][ T51] Bluetooth: hci2: command tx timeout [ 90.930788][ T5895] xt_CT: No such helper "snmp_trap" [ 91.383765][ T5903] loop2: detected capacity change from 0 to 4096 [ 91.419956][ T5903] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.451586][ T5903] EXT4-fs (loop2): Test dummy encryption mode enabled [ 91.501649][ T5903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.478723][ T788] cfg80211: failed to load regulatory.db [ 92.750406][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.937655][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 94.200259][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.239205][ T5916] loop3: detected capacity change from 0 to 512 [ 94.261967][ T5916] EXT4-fs: Ignoring removed i_version option [ 94.353113][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.401041][ T5916] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.615338][ C0] sched: RT throttling activated [ 94.726327][ T5913] syz.1.15 (5913) used greatest stack depth: 16624 bytes left [ 95.241842][ T5916] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.379678][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.495033][ T5925] netlink: 'syz.1.18': attribute type 8 has an invalid length. [ 97.042597][ T5943] loop1: detected capacity change from 0 to 512 [ 97.281518][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.461402][ T5943] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.475208][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.516632][ T5956] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use) [ 99.570057][ T5956] program syz.0.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.857759][ T5962] xt_bpf: check failed: parse error [ 102.585790][ T5990] program syz.0.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.425053][ T6012] loop3: detected capacity change from 0 to 256 [ 106.450998][ T6012] ======================================================= [ 106.450998][ T6012] WARNING: The mand mount option has been deprecated and [ 106.450998][ T6012] and is ignored by this kernel. Remove the mand [ 106.450998][ T6012] option from the mount to silence this warning. [ 106.450998][ T6012] ======================================================= [ 106.485926][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.550979][ T6012] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.584305][ T6012] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 106.632625][ T6012] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 106.856937][ T6017] program syz.0.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.718002][ T6031] xt_bpf: check failed: parse error [ 113.311037][ T6041] Zero length message leads to an empty skb [ 113.662231][ T6045] loop2: detected capacity change from 0 to 4096 [ 113.696288][ T6045] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.706752][ T6045] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.796713][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.768437][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.166864][ T6073] xt_bpf: check failed: parse error [ 120.531449][ T51] Bluetooth: hci1: unexpected event for opcode 0x200a [ 130.521183][ T6120] mmap: syz.3.73 (6120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.785549][ T972] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.825045][ T6126] loop3: detected capacity change from 0 to 512 [ 130.995708][ T6126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.009203][ T6126] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.660018][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.742988][ T6131] bridge_slave_0: left allmulticast mode [ 131.759263][ T6131] bridge_slave_0: left promiscuous mode [ 131.766589][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.824304][ T6131] bridge_slave_1: left allmulticast mode [ 131.833092][ T6131] bridge_slave_1: left promiscuous mode [ 131.846110][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.875390][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.968474][ T972] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 132.026664][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 132.065219][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.348009][ T972] usb 3-1: config 0 descriptor?? [ 132.421529][ T6131] bond0: (slave bond_slave_1): Releasing backup interface [ 132.654744][ T972] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.850327][ T6131] team0: Port device team_slave_0 removed [ 132.884445][ T6131] team0: Port device team_slave_1 removed [ 132.909870][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.932655][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.964132][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.978156][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.060333][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.068214][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130305][ T6136] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 133.155484][ T6136] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 133.175435][ T6136] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 135.047651][ T788] usb 3-1: USB disconnect, device number 2 [ 137.026457][ T6162] lo speed is unknown, defaulting to 1000 [ 137.480027][ T6168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.373504][ T6169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.920772][ T6162] lo speed is unknown, defaulting to 1000 [ 140.022403][ T6162] lo speed is unknown, defaulting to 1000 [ 140.077841][ T6162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.100874][ T51] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 140.142450][ T6162] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.155429][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.022295][ T6162] lo speed is unknown, defaulting to 1000 [ 142.090810][ T6162] lo speed is unknown, defaulting to 1000 [ 142.126921][ T6162] lo speed is unknown, defaulting to 1000 [ 142.138433][ T6162] lo speed is unknown, defaulting to 1000 [ 142.161550][ T6162] lo speed is unknown, defaulting to 1000 [ 142.191218][ T6162] lo speed is unknown, defaulting to 1000 [ 142.251218][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.300074][ T5818] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 142.333721][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.395077][ T5818] usb 4-1: config 0 descriptor?? [ 142.450214][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 145.351832][ T8] usb 4-1: USB disconnect, device number 2 [ 146.145391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 148.387599][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 150.094553][ T6250] xt_bpf: check failed: parse error [ 152.075741][ T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.365468][ T972] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.398371][ T972] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.450192][ T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.475488][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.517117][ T972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.570041][ T972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.626269][ T972] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.662943][ T972] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.715576][ T972] usb 3-1: Product: syz [ 152.722598][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.744516][ T972] usb 3-1: Manufacturer: syz [ 152.771518][ T23] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 152.813631][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.861428][ T972] cdc_wdm 3-1:1.0: skipping garbage [ 152.889122][ T23] usb 1-1: config 0 descriptor?? [ 152.910649][ T972] cdc_wdm 3-1:1.0: skipping garbage [ 152.958318][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 152.990984][ T6279] lo speed is unknown, defaulting to 1000 [ 153.002239][ T972] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 153.042630][ T972] cdc_wdm 3-1:1.0: Unknown control protocol [ 153.121937][ T6272] warning: `syz.2.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.232827][ T972] usb 3-1: USB disconnect, device number 3 [ 153.518219][ T6297] bridge_slave_0: left allmulticast mode [ 153.533914][ T6297] bridge_slave_0: left promiscuous mode [ 153.557362][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.638981][ T6297] bridge_slave_1: left allmulticast mode [ 153.657265][ T6297] bridge_slave_1: left promiscuous mode [ 153.674612][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.692472][ T6297] bond0: (slave bond_slave_0): Releasing backup interface [ 153.714439][ T6297] bond0: (slave bond_slave_1): Releasing backup interface [ 153.764194][ T6297] team0: Port device team_slave_0 removed [ 153.796268][ T6297] team0: Port device team_slave_1 removed [ 153.811086][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.828997][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.845757][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.862718][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.220184][ T5838] usb 1-1: USB disconnect, device number 2 [ 157.561955][ T6353] xt_bpf: check failed: parse error [ 158.104646][ T6364] siw: device registration error -23 [ 158.936601][ T6367] loop1: detected capacity change from 0 to 4096 [ 158.954029][ T6367] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.005176][ T6367] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.126675][ T6373] program syz.3.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.158413][ T6367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.981769][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.519802][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.134'. [ 160.538866][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.134'. [ 161.230445][ T6410] xt_CT: No such helper "snmp_trap" [ 162.468744][ T6438] xt_bpf: check failed: parse error [ 163.518158][ T6450] bridge_slave_0: left allmulticast mode [ 163.524013][ T6450] bridge_slave_0: left promiscuous mode [ 163.535193][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.567474][ T6450] bridge_slave_1: left allmulticast mode [ 163.579478][ T6450] bridge_slave_1: left promiscuous mode [ 163.586749][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.620230][ T6450] bond0: (slave bond_slave_0): Releasing backup interface [ 163.654792][ T6450] bond0: (slave bond_slave_1): Releasing backup interface [ 163.752999][ T6450] team0: Port device team_slave_0 removed [ 163.785654][ T6453] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.803373][ T6450] team0: Port device team_slave_1 removed [ 163.822615][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.839849][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.859308][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.870928][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.050501][ T6470] xt_CT: No such helper "snmp_trap" [ 168.304738][ T6485] xt_bpf: check failed: parse error [ 170.689946][ T6500] xt_CT: No such helper "snmp_trap" [ 172.650782][ T6531] xt_CT: No such helper "snmp_trap" [ 173.015595][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 173.217622][ T8] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 173.240950][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.272228][ T8] usb 4-1: config 0 descriptor?? [ 173.318798][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 173.566097][ T6548] 9pnet_virtio: no channels available for device syz [ 173.742135][ T8] gp8psk: usb in 138 operation failed. [ 173.763390][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 173.789658][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 173.836583][ T8] usb 4-1: USB disconnect, device number 3 [ 179.549967][ T6576] xt_bpf: check failed: parse error [ 180.845393][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.062689][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.083839][ T788] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 181.094208][ T6609] tipc: Started in network mode [ 181.099713][ T6609] tipc: Node identity 4, cluster identity 4711 [ 181.105980][ T6609] tipc: Node number set to 4 [ 181.125486][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.177775][ T6611] loop0: detected capacity change from 0 to 256 [ 181.194945][ T788] usb 3-1: config 0 descriptor?? [ 181.220438][ T788] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 181.525707][ T6614] tipc: Started in network mode [ 181.532529][ T6614] tipc: Node identity 4, cluster identity 4711 [ 181.539307][ T6614] tipc: Node number set to 4 [ 182.499984][ T6614] loop3: detected capacity change from 0 to 256 [ 182.912880][ T51] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 182.912978][ T51] Bluetooth: hci1: adv larger than maximum supported [ 182.920958][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 184.083445][ T8] usb 3-1: USB disconnect, device number 4 [ 185.950930][ T6650] loop3: detected capacity change from 0 to 256 [ 188.047793][ T6671] loop2: detected capacity change from 0 to 4096 [ 188.056038][ T6671] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.063998][ T6671] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.071054][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.112958][ T6671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.268988][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.287663][ T8] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 188.299263][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.317388][ T8] usb 4-1: config 0 descriptor?? [ 188.337769][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 188.349001][ T6678] netlink: 'syz.1.222': attribute type 8 has an invalid length. [ 189.009278][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.726458][ T6686] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.476950][ T8] usb 4-1: USB disconnect, device number 4 [ 194.243069][ T6706] loop0: detected capacity change from 0 to 4096 [ 194.256123][ T6706] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.264357][ T6708] program syz.1.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.279505][ T6706] EXT4-fs (loop0): Test dummy encryption mode enabled [ 194.422350][ T6706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.503491][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.510114][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.991624][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.237'. [ 195.533188][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.174927][ T6732] tipc: Started in network mode [ 196.180246][ T6732] tipc: Node identity 4, cluster identity 4711 [ 196.186496][ T6732] tipc: Node number set to 4 [ 196.242566][ T6732] loop2: detected capacity change from 0 to 256 [ 197.428475][ T972] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 198.296079][ T972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.331168][ T972] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 198.378476][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.417361][ T972] usb 1-1: config 0 descriptor?? [ 198.483275][ T972] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 198.585456][ T6764] loop3: detected capacity change from 0 to 4096 [ 198.611976][ T6764] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.657692][ T6764] EXT4-fs (loop3): Test dummy encryption mode enabled [ 198.695463][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.664997][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.950219][ T788] usb 1-1: USB disconnect, device number 3 [ 200.166218][ T6783] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 200.202207][ T6785] loop0: detected capacity change from 0 to 256 [ 200.257605][ T6783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.265999][ T6785] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.303089][ T6785] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 200.335068][ T6785] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.361015][ T6786] bond1: (slave gretap1): making interface the new active one [ 200.372708][ T6786] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 201.054793][ T6803] loop0: detected capacity change from 0 to 4096 [ 201.073183][ T6803] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.119006][ T23] IPVS: starting estimator thread 0... [ 201.146376][ T6803] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.187111][ T6803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.225559][ T6806] IPVS: using max 26 ests per chain, 62400 per kthread [ 201.725434][ T5819] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.910326][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.937131][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.955446][ T5819] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 201.995766][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.055042][ T5819] usb 4-1: config 0 descriptor?? [ 202.079755][ T5819] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 203.858252][ T6831] xt_CT: No such helper "snmp_trap" [ 204.359080][ T6837] program syz.0.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.588071][ T5866] usb 4-1: USB disconnect, device number 5 [ 204.865224][ T6841] loop1: detected capacity change from 0 to 4096 [ 204.913069][ T6841] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.955992][ T6841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.310145][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.249557][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.291626][ T6859] xt_CT: No such helper "snmp_trap" [ 206.822101][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 206.828535][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 207.685919][ T6875] loop2: detected capacity change from 0 to 256 [ 207.703029][ T6875] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.732354][ T6875] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 207.757599][ T6875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 208.283995][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 208.284067][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 208.314267][ T6888] loop2: detected capacity change from 0 to 256 [ 208.563340][ T6890] loop0: detected capacity change from 0 to 4096 [ 208.605114][ T6890] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.642879][ T6890] EXT4-fs (loop0): Test dummy encryption mode enabled [ 208.689801][ T6890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.226094][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.342178][ T6913] loop2: detected capacity change from 0 to 4096 [ 211.357356][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 211.357387][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 211.406946][ T6913] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.430567][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 211.449046][ T6913] EXT4-fs (loop2): Test dummy encryption mode enabled [ 211.561296][ T6913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.712638][ T6913] overlayfs: missing 'lowerdir' [ 212.143082][ T6923] loop3: detected capacity change from 0 to 4096 [ 212.172212][ T6923] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.215517][ T6923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 212.238111][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.460452][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.642546][ T6927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.716262][ T6929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.824424][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.488866][ T6946] xt_CT: No such helper "snmp_trap" [ 216.644703][ T6956] loop3: detected capacity change from 0 to 256 [ 219.223924][ T6971] loop1: detected capacity change from 0 to 4096 [ 219.231789][ T6971] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.288530][ T6971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.386133][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.965253][ T6983] lo speed is unknown, defaulting to 1000 [ 219.971618][ T6983] lo speed is unknown, defaulting to 1000 [ 219.983973][ T6983] lo speed is unknown, defaulting to 1000 [ 220.048009][ T6983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 220.191349][ T6983] lo speed is unknown, defaulting to 1000 [ 220.204461][ T6983] lo speed is unknown, defaulting to 1000 [ 220.217199][ T6983] lo speed is unknown, defaulting to 1000 [ 220.241072][ T6983] lo speed is unknown, defaulting to 1000 [ 220.868648][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.236372][ T6987] xt_CT: No such helper "snmp_trap" [ 221.338930][ T6992] program syz.1.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.960080][ T7001] usb usb8: usbfs: process 7001 (syz.3.324) did not claim interface 0 before use [ 223.100242][ T7009] tipc: Started in network mode [ 223.105206][ T7009] tipc: Node identity 4, cluster identity 4711 [ 223.197388][ T7009] tipc: Node number set to 4 [ 223.304386][ T7009] loop1: detected capacity change from 0 to 256 [ 223.834762][ T7026] siw: device registration error -23 [ 223.857121][ T7023] loop3: detected capacity change from 0 to 4096 [ 223.902285][ T7023] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.043125][ T7023] EXT4-fs (loop3): Test dummy encryption mode enabled [ 224.374809][ T7023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.285836][ T7032] xt_CT: No such helper "snmp_trap" [ 225.450527][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.875356][ T5866] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 227.043478][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.052403][ T5866] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 227.061566][ T5866] usb 2-1: can't read configurations, error -71 [ 228.252065][ T7059] siw: device registration error -23 [ 228.793231][ T7064] loop1: detected capacity change from 0 to 4096 [ 228.806212][ T7064] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.915952][ T7064] EXT4-fs (loop1): Test dummy encryption mode enabled [ 228.990967][ T7064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.472963][ T7076] xt_CT: No such helper "snmp_trap" [ 229.532893][ T7079] loop0: detected capacity change from 0 to 256 [ 229.545234][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.104730][ T51] Bluetooth: hci3: unexpected event for opcode 0x200a [ 231.173556][ T7099] siw: device registration error -23 [ 234.166923][ T5819] IPVS: starting estimator thread 0... [ 234.305487][ T7107] IPVS: using max 26 ests per chain, 62400 per kthread [ 236.538296][ T7125] loop2: detected capacity change from 0 to 256 [ 236.592481][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 236.692482][ T7126] xt_CT: No such helper "snmp_trap" [ 236.771026][ T7128] netlink: 56 bytes leftover after parsing attributes in process `syz.0.359'. [ 237.131820][ T7136] siw: device registration error -23 [ 239.732582][ T7158] autofs4:pid:7158:autofs_fill_super: called with bogus options [ 240.145928][ T7165] loop2: detected capacity change from 0 to 256 [ 241.314572][ T7174] loop1: detected capacity change from 0 to 256 [ 241.595415][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 241.804789][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.824019][ T8] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.870615][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.920445][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.952421][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.971396][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.984021][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.999671][ T8] usb 1-1: Product: syz [ 242.004440][ T8] usb 1-1: Manufacturer: syz [ 242.022905][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 242.030129][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 242.047856][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 242.069241][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 242.310272][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 242.684482][ T7192] loop3: detected capacity change from 0 to 4096 [ 242.705725][ T7192] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.739243][ T7192] EXT4-fs (loop3): Test dummy encryption mode enabled [ 242.774442][ T7192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.811402][ T7192] overlayfs: missing 'workdir' [ 243.005943][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.050527][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.397433][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.300576][ T8] usb 1-1: USB disconnect, device number 4 [ 248.914405][ T7231] loop3: detected capacity change from 0 to 4096 [ 248.937231][ T7231] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.038172][ T7231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 249.184320][ T7231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.306493][ T7231] overlayfs: missing 'workdir' [ 249.968920][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.938675][ T7256] loop1: detected capacity change from 0 to 256 [ 255.815762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 255.939635][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.225307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 256.391733][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.939336][ T7295] loop3: detected capacity change from 0 to 256 [ 258.756550][ T7298] binder_alloc: 7297: binder_alloc_buf, no vma [ 259.059142][ T7305] loop1: detected capacity change from 0 to 256 [ 262.999357][ T7340] binder: BINDER_SET_CONTEXT_MGR already set [ 263.023588][ T7340] binder: 7339:7340 ioctl 4018620d 200000000240 returned -16 [ 263.045604][ T7342] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 263.052521][ T7342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.117130][ T7342] vhci_hcd vhci_hcd.0: Device attached [ 263.148484][ T7340] binder: BINDER_SET_CONTEXT_MGR already set [ 263.154729][ T7340] binder: 7339:7340 ioctl 4018620d 200000000040 returned -16 [ 263.232289][ T7355] loop3: detected capacity change from 0 to 256 [ 263.346730][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 263.375426][ T5866] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 263.545554][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 263.557528][ T9] usb 2-1: config 0 has no interfaces? [ 263.568870][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.582373][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.591930][ T9] usb 2-1: Product: syz [ 263.601693][ T9] usb 2-1: Manufacturer: syz [ 263.606872][ T9] usb 2-1: SerialNumber: syz [ 263.615018][ T9] usb 2-1: config 0 descriptor?? [ 263.898289][ T7343] usb 35-1: recv xbuf, 0 [ 263.925506][ T78] vhci_hcd: stop threads [ 263.950080][ T78] vhci_hcd: release socket [ 263.972855][ T78] vhci_hcd: disconnect device [ 265.025428][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 265.222320][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.231115][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 265.242168][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.260461][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 265.274100][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 265.292536][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.301986][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.310409][ T9] usb 1-1: Product: syz [ 265.323881][ T9] usb 1-1: Manufacturer: syz [ 265.352210][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 265.363658][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 265.375579][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 265.386220][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 265.582931][ T5838] usb 1-1: USB disconnect, device number 5 [ 266.034463][ T5838] usb 2-1: USB disconnect, device number 4 [ 267.109358][ T7386] loop0: detected capacity change from 0 to 256 [ 270.208350][ T7431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.438'. [ 270.224349][ T7431] ------------[ cut here ]------------ [ 270.230012][ T7431] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 270.310060][ T7431] WARNING: CPU: 0 PID: 7431 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 270.319402][ T7431] Modules linked in: [ 270.323375][ T7431] CPU: 0 PID: 7431 Comm: syz.3.438 Not tainted syzkaller #0 [ 270.330834][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.341056][ T7431] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 270.346505][ T7431] Code: f8 eb 59 e8 78 00 d7 f8 c6 05 09 e0 c5 05 01 b9 10 00 00 00 48 c7 c7 c0 a3 c7 8b 4c 89 f6 48 c7 c2 40 a4 c7 8b e8 56 b2 a0 f8 <0f> 0b e9 86 f0 ff ff e8 4a 00 d7 f8 eb 24 e8 43 00 d7 f8 c6 05 a3 [ 270.366785][ T7431] RSP: 0018:ffffc9000c536d40 EFLAGS: 00010246 [ 270.372925][ T7431] RAX: 78dc11f2847d7000 RBX: ffff88805d059400 RCX: 0000000000080000 [ 270.381476][ T7431] RDX: ffffc9000ee03000 RSI: 00000000000062ef RDI: 00000000000062f0 [ 270.389674][ T7431] RBP: ffffc9000c536ef8 R08: ffffc9000c536947 R09: 1ffff920018a6d28 [ 270.397744][ T7431] R10: dffffc0000000000 R11: fffff520018a6d29 R12: ffff88801fbd0400 [ 270.405849][ T7431] R13: ffff88801fbd04e8 R14: 0000000000000020 R15: ffff88803091bb80 [ 270.413860][ T7431] FS: 00007f0a9d9b46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 270.422867][ T7431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.429749][ T7431] CR2: 0000200000003580 CR3: 00000000294fd000 CR4: 00000000003506f0 [ 270.437859][ T7431] Call Trace: [ 270.441191][ T7431] [ 270.444157][ T7431] ? tc_new_tfilter+0x8f7/0x17c0 [ 270.449180][ T7431] ? u32_get+0x370/0x370 [ 270.453465][ T7431] ? u32_get+0x370/0x370 [ 270.457782][ T7431] tc_new_tfilter+0x11f9/0x17c0 [ 270.462973][ T7431] ? tcf_proto_signal_destroying+0x240/0x240 [ 270.469109][ T7431] ? rcu_read_unlock+0x8c/0xa0 [ 270.473907][ T7431] ? tcf_proto_signal_destroying+0x240/0x240 [ 270.479977][ T7431] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 270.485232][ T7431] ? tcf_proto_signal_destroying+0x240/0x240 [ 270.491337][ T7431] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 270.496355][ T7431] ? lockdep_hardirqs_on+0x98/0x150 [ 270.501625][ T7431] ? rtnetlink_bind+0x80/0x80 [ 270.506441][ T7431] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 270.512451][ T7431] ? lock_chain_count+0x20/0x20 [ 270.517351][ T7431] ? __local_bh_enable_ip+0x13a/0x1c0 [ 270.522758][ T7431] ? lockdep_hardirqs_on+0x98/0x150 [ 270.528055][ T7431] ? __local_bh_enable_ip+0x13a/0x1c0 [ 270.533459][ T7431] ? _local_bh_enable+0xa0/0xa0 [ 270.538419][ T7431] ? __dev_queue_xmit+0x265/0x3660 [ 270.543560][ T7431] ? __dev_queue_xmit+0x265/0x3660 [ 270.548897][ T7431] ? __dev_queue_xmit+0x1b2c/0x3660 [ 270.554140][ T7431] ? __dev_queue_xmit+0x265/0x3660 [ 270.559330][ T7431] ? ref_tracker_free+0x690/0x840 [ 270.564679][ T7431] netlink_rcv_skb+0x241/0x4d0 [ 270.569633][ T7431] ? rtnetlink_bind+0x80/0x80 [ 270.574338][ T7431] ? netlink_ack+0x1180/0x1180 [ 270.579171][ T7431] ? __lock_acquire+0x7d40/0x7d40 [ 270.584228][ T7431] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.589502][ T7431] netlink_unicast+0x751/0x8d0 [ 270.594292][ T7431] netlink_sendmsg+0x8d0/0xbf0 [ 270.599121][ T7431] ? netlink_getsockopt+0x590/0x590 [ 270.604340][ T7431] ? aa_sock_msg_perm+0x94/0x150 [ 270.609348][ T7431] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.614654][ T7431] ? security_socket_sendmsg+0x80/0xa0 [ 270.620172][ T7431] ? netlink_getsockopt+0x590/0x590 [ 270.625447][ T7431] ____sys_sendmsg+0x5ba/0x960 [ 270.630238][ T7431] ? __asan_memset+0x22/0x40 [ 270.634847][ T7431] ? __sys_sendmsg_sock+0x30/0x30 [ 270.639926][ T7431] ? __import_iovec+0x5f2/0x850 [ 270.644799][ T7431] ? import_iovec+0x73/0xa0 [ 270.649366][ T7431] ___sys_sendmsg+0x2a6/0x360 [ 270.654072][ T7431] ? __sys_sendmsg+0x2a0/0x2a0 [ 270.659307][ T7431] __sys_sendmmsg+0x2ca/0x510 [ 270.664526][ T7431] ? __ia32_sys_sendmsg+0x90/0x90 [ 270.669714][ T7431] ? __ia32_sys_get_robust_list+0x110/0x110 [ 270.675677][ T7431] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 270.681699][ T7431] ? lock_chain_count+0x20/0x20 [ 270.686649][ T7431] __x64_sys_sendmmsg+0xa0/0xb0 [ 270.691535][ T7431] do_syscall_64+0x55/0xb0 [ 270.696073][ T7431] ? clear_bhb_loop+0x40/0x90 [ 270.700768][ T7431] ? clear_bhb_loop+0x40/0x90 [ 270.705528][ T7431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.711454][ T7431] RIP: 0033:0x7f0a9f79ce59 [ 270.715972][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.735703][ T7431] RSP: 002b:00007f0a9d9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.744171][ T7431] RAX: ffffffffffffffda RBX: 00007f0a9fa16180 RCX: 00007f0a9f79ce59 [ 270.752204][ T7431] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 270.760337][ T7431] RBP: 00007f0a9f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 270.768649][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.776792][ T7431] R13: 00007f0a9fa16218 R14: 00007f0a9fa16180 R15: 00007fff866ee7d8 [ 270.784814][ T7431] [ 270.787894][ T7431] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.795194][ T7431] CPU: 0 PID: 7431 Comm: syz.3.438 Not tainted syzkaller #0 [ 270.802504][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.812677][ T7431] Call Trace: [ 270.815976][ T7431] [ 270.818926][ T7431] dump_stack_lvl+0x18c/0x250 [ 270.823633][ T7431] ? show_regs_print_info+0x20/0x20 [ 270.828850][ T7431] ? load_image+0x420/0x420 [ 270.833409][ T7431] panic+0x2dc/0x730 [ 270.837354][ T7431] ? bpf_jit_dump+0xd0/0xd0 [ 270.841980][ T7431] __warn+0x2e0/0x470 [ 270.846013][ T7431] ? u32_change+0x1c5a/0x24f0 [ 270.850748][ T7431] ? u32_change+0x1c5a/0x24f0 [ 270.855456][ T7431] report_bug+0x2be/0x4f0 [ 270.859831][ T7431] ? u32_change+0x1c5a/0x24f0 [ 270.864531][ T7431] ? u32_change+0x1c5a/0x24f0 [ 270.869243][ T7431] ? u32_change+0x1c5c/0x24f0 [ 270.874051][ T7431] handle_bug+0xcf/0x120 [ 270.878338][ T7431] exc_invalid_op+0x1a/0x50 [ 270.882862][ T7431] asm_exc_invalid_op+0x1a/0x20 [ 270.887739][ T7431] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 270.893049][ T7431] Code: f8 eb 59 e8 78 00 d7 f8 c6 05 09 e0 c5 05 01 b9 10 00 00 00 48 c7 c7 c0 a3 c7 8b 4c 89 f6 48 c7 c2 40 a4 c7 8b e8 56 b2 a0 f8 <0f> 0b e9 86 f0 ff ff e8 4a 00 d7 f8 eb 24 e8 43 00 d7 f8 c6 05 a3 [ 270.912767][ T7431] RSP: 0018:ffffc9000c536d40 EFLAGS: 00010246 [ 270.918885][ T7431] RAX: 78dc11f2847d7000 RBX: ffff88805d059400 RCX: 0000000000080000 [ 270.926875][ T7431] RDX: ffffc9000ee03000 RSI: 00000000000062ef RDI: 00000000000062f0 [ 270.934864][ T7431] RBP: ffffc9000c536ef8 R08: ffffc9000c536947 R09: 1ffff920018a6d28 [ 270.942848][ T7431] R10: dffffc0000000000 R11: fffff520018a6d29 R12: ffff88801fbd0400 [ 270.950839][ T7431] R13: ffff88801fbd04e8 R14: 0000000000000020 R15: ffff88803091bb80 [ 270.958848][ T7431] ? tc_new_tfilter+0x8f7/0x17c0 [ 270.963945][ T7431] ? u32_get+0x370/0x370 [ 270.968230][ T7431] ? u32_get+0x370/0x370 [ 270.972506][ T7431] tc_new_tfilter+0x11f9/0x17c0 [ 270.977406][ T7431] ? tcf_proto_signal_destroying+0x240/0x240 [ 270.983419][ T7431] ? rcu_read_unlock+0x8c/0xa0 [ 270.988211][ T7431] ? tcf_proto_signal_destroying+0x240/0x240 [ 270.994212][ T7431] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 270.999342][ T7431] ? tcf_proto_signal_destroying+0x240/0x240 [ 271.005352][ T7431] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 271.010336][ T7431] ? lockdep_hardirqs_on+0x98/0x150 [ 271.015560][ T7431] ? rtnetlink_bind+0x80/0x80 [ 271.020343][ T7431] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 271.026357][ T7431] ? lock_chain_count+0x20/0x20 [ 271.031225][ T7431] ? __local_bh_enable_ip+0x13a/0x1c0 [ 271.036620][ T7431] ? lockdep_hardirqs_on+0x98/0x150 [ 271.041842][ T7431] ? __local_bh_enable_ip+0x13a/0x1c0 [ 271.047226][ T7431] ? _local_bh_enable+0xa0/0xa0 [ 271.052106][ T7431] ? __dev_queue_xmit+0x265/0x3660 [ 271.057256][ T7431] ? __dev_queue_xmit+0x265/0x3660 [ 271.062398][ T7431] ? __dev_queue_xmit+0x1b2c/0x3660 [ 271.067626][ T7431] ? __dev_queue_xmit+0x265/0x3660 [ 271.072778][ T7431] ? ref_tracker_free+0x690/0x840 [ 271.078029][ T7431] netlink_rcv_skb+0x241/0x4d0 [ 271.082808][ T7431] ? rtnetlink_bind+0x80/0x80 [ 271.087505][ T7431] ? netlink_ack+0x1180/0x1180 [ 271.092304][ T7431] ? __lock_acquire+0x7d40/0x7d40 [ 271.097347][ T7431] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.102559][ T7431] netlink_unicast+0x751/0x8d0 [ 271.107370][ T7431] netlink_sendmsg+0x8d0/0xbf0 [ 271.112173][ T7431] ? netlink_getsockopt+0x590/0x590 [ 271.117397][ T7431] ? aa_sock_msg_perm+0x94/0x150 [ 271.122362][ T7431] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.127661][ T7431] ? security_socket_sendmsg+0x80/0xa0 [ 271.133132][ T7431] ? netlink_getsockopt+0x590/0x590 [ 271.138346][ T7431] ____sys_sendmsg+0x5ba/0x960 [ 271.143135][ T7431] ? __asan_memset+0x22/0x40 [ 271.147739][ T7431] ? __sys_sendmsg_sock+0x30/0x30 [ 271.152776][ T7431] ? __import_iovec+0x5f2/0x850 [ 271.157644][ T7431] ? import_iovec+0x73/0xa0 [ 271.162164][ T7431] ___sys_sendmsg+0x2a6/0x360 [ 271.166867][ T7431] ? __sys_sendmsg+0x2a0/0x2a0 [ 271.171723][ T7431] __sys_sendmmsg+0x2ca/0x510 [ 271.176437][ T7431] ? __ia32_sys_sendmsg+0x90/0x90 [ 271.181506][ T7431] ? __ia32_sys_get_robust_list+0x110/0x110 [ 271.187435][ T7431] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 271.193431][ T7431] ? lock_chain_count+0x20/0x20 [ 271.198294][ T7431] __x64_sys_sendmmsg+0xa0/0xb0 [ 271.203175][ T7431] do_syscall_64+0x55/0xb0 [ 271.207608][ T7431] ? clear_bhb_loop+0x40/0x90 [ 271.212299][ T7431] ? clear_bhb_loop+0x40/0x90 [ 271.216988][ T7431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.222900][ T7431] RIP: 0033:0x7f0a9f79ce59 [ 271.227329][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.247122][ T7431] RSP: 002b:00007f0a9d9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.255589][ T7431] RAX: ffffffffffffffda RBX: 00007f0a9fa16180 RCX: 00007f0a9f79ce59 [ 271.263777][ T7431] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 271.271770][ T7431] RBP: 00007f0a9f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 271.279757][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.287818][ T7431] R13: 00007f0a9fa16218 R14: 00007f0a9fa16180 R15: 00007fff866ee7d8 [ 271.295835][ T7431] [ 271.299060][ T7431] Kernel Offset: disabled [ 271.303409][ T7431] Rebooting in 86400 seconds..