last executing test programs: 2m44.419311757s ago: executing program 0 (id=17): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="d8000000000000000a01000001040000222d3d34497cafd0c630026b890101c2e950ee6e34c4d5848289c700a5d8d4b1d4829f3ccec20d415b410c3abe2d68e18ec14ef6d9af87a2a5e594d22c4eeeb20a20a08d95f8632e1fd9ff5ac71ea7839013c117cb6459a36a591ca65eba12bd1cc7e35272f9239b3e3f40ea116f8c4f0f7e1e8d84a03c8765cc8219b376deb3211db2adb692b772d6ad472956512ba3064503746049634e2e5f7aacc5f46ca7e00d2775f454f8511083a89be6a2abf66caa6f0a5367ca66df75478cc3ca1c7f533080aa22f35d4160000000000000000c01000004000000b85a8e16f2e9a27cf0e86b8e63c4066f684cb5f33ee36c612bb8cd02655a78971c3ec773e3a840fb879cb8de184a23ecc71cba1ba02a324d6381f017f2d50bc533465a4aff6745fb20d584000000000094bdd638d967f705c95e29cfa07d0dcb70a1a19d65d34182af7fdf2f5eb3979e5a4bfeac3f60bab756ba4b24b1073b7151d16b"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2m42.991207969s ago: executing program 0 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 2m40.413281111s ago: executing program 0 (id=26): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x805}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ea}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x53, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000abc0)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000340)={@rand_addr=0x64010101, @local, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7, 0x9}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) r6 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000024be48b5815409106a182392d9b1801a941c318fef6982ed773193e1c5d1fc838edd1c07fac0ba329ed9592b7096", @ANYRES16=r7, @ANYBLOB="05072bbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) 2m36.079181182s ago: executing program 0 (id=29): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8000, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x498, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0xffffffff, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x37], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x20000000, 0x3, 0xfffffffc, 0x4, 0x200800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x52, 0x1, 0xe24c5001d609a4b6}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffb}}, 0xe8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m31.597568305s ago: executing program 0 (id=35): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), 0x0, &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df01", 0x5c) recvmsg$unix(r1, &(0x7f0000002800)={&(0x7f0000002680), 0x6e, &(0x7f0000000100)=[{&(0x7f0000002700)=""/215, 0xd7}], 0x1, &(0x7f0000002600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @multicast1}, 'lo\x00'}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000002840)) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002640)={'vlan0\x00', 0x2}) 2m23.257524909s ago: executing program 0 (id=42): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x8e, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) close(0xffffffffffffffff) 2m8.008309404s ago: executing program 32 (id=42): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x8e, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) close(0xffffffffffffffff) 1m47.103659133s ago: executing program 2 (id=86): syz_emit_ethernet(0xe, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) 1m45.695568421s ago: executing program 2 (id=88): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4000000000000, 0x101401) 1m42.04540208s ago: executing program 2 (id=95): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1m39.969974451s ago: executing program 2 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m38.144784925s ago: executing program 2 (id=100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m37.188506016s ago: executing program 2 (id=104): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8000, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x498, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0xffffffff, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x37], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x20000000, 0x3, 0xfffffffc, 0x4, 0x200800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x52, 0x1, 0xe24c5001d609a4b6}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffb}}, 0xe8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 1m27.871821411s ago: executing program 4 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m27.586569141s ago: executing program 4 (id=112): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x0, 0xe00, 0xa5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) 1m22.915559128s ago: executing program 4 (id=117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m21.570287211s ago: executing program 33 (id=104): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8000, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x498, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0xffffffff, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x37], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x20000000, 0x3, 0xfffffffc, 0x4, 0x200800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x52, 0x1, 0xe24c5001d609a4b6}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffb}}, 0xe8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 1m20.244452711s ago: executing program 4 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m19.944031395s ago: executing program 4 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24040854}, 0x24014080) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x7fffffff, 0xf0a, 0xfb, 0x10}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fchdir(0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m16.464040916s ago: executing program 4 (id=127): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x0, 0xe00, 0xa5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) 1m1.350957325s ago: executing program 34 (id=127): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x0, 0xe00, 0xa5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) 15.010141369s ago: executing program 1 (id=186): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1c90467cefaf9d2b"], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 7.23173367s ago: executing program 3 (id=192): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100e0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) 6.224751721s ago: executing program 3 (id=193): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rtc_irq_set_state\x00', 0xffffffffffffffff, 0x0, 0x4000000}, 0x18) r6 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 5.042646376s ago: executing program 3 (id=194): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4.935156329s ago: executing program 3 (id=195): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2}) socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000b80)={{r2}, 0x0, 0x0, @unused=[0x82, 0x7f, 0x4, 0x80], @devid}) 3.913618628s ago: executing program 3 (id=196): syz_clone3(&(0x7f0000001340)={0x200, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180), {0x10}, &(0x7f00000001c0)=""/161, 0xa1, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0], 0x1}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002900)={&(0x7f0000001900)=[0x1, 0x5, 0xf, 0x2, 0x6, 0x6, 0x5, 0x6, 0xff, 0x200, 0x9b80, 0xa, 0xb, 0x6, 0xa14, 0x4, 0x2, 0x8, 0x101, 0x0, 0x8, 0x0, 0xfffffff7, 0x5, 0xe, 0x1, 0x2, 0x5, 0x1, 0x9, 0x8, 0x7, 0x1, 0x2, 0x3ffc0000, 0x75, 0x7, 0xe817, 0x6, 0x9, 0x2, 0x8, 0x0, 0xb12, 0x9, 0x5, 0x5, 0x3, 0x2, 0x3, 0xfffffc00, 0x0, 0x9, 0x800, 0x6, 0x4, 0x5, 0x8, 0x1000, 0x4, 0x636f, 0x4, 0x8, 0xfffffff8, 0x35d2, 0xc0cd, 0x594e, 0x2, 0x200, 0x401, 0x10001, 0x9, 0x9, 0x8, 0x7, 0x0, 0x10001, 0x40, 0x7, 0x1, 0x1, 0x3, 0x1, 0x9, 0x1, 0x10001, 0x1, 0x3, 0x7, 0x5, 0xee, 0x0, 0x6, 0x401, 0x5, 0x8, 0xffffff12, 0x4, 0x86, 0x7fff, 0x6, 0x4, 0x40, 0x1000, 0x6, 0x6, 0x8, 0x243e, 0x2, 0xd, 0x6, 0x401, 0x7, 0x3, 0x1, 0x6, 0x6, 0x8001, 0x1, 0x6, 0x7, 0x6, 0xfffffffa, 0x4, 0x7, 0x9, 0x80000000, 0xfffffffd, 0x7, 0x5, 0x7, 0x51bd, 0x2, 0x1ff, 0xb, 0x1, 0x0, 0x9, 0x39d, 0x7, 0xfffffe01, 0x5926, 0x22, 0x400, 0x1, 0x2, 0xc1, 0x3, 0xaa0, 0x4, 0x9, 0x8, 0x6, 0x40, 0x0, 0x3, 0xeae, 0xc, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x8, 0x8, 0xf, 0x7b0a745e, 0x2, 0x6, 0x7, 0xf, 0x8000, 0x4, 0x71, 0xff, 0x2, 0x80000000, 0x6, 0x2, 0x9, 0x7f, 0x3, 0x1d, 0x4, 0x7, 0xffffffff, 0x5, 0x7f, 0x5, 0x2, 0x8001, 0x584, 0x7, 0x7, 0x8001, 0x1, 0x0, 0x1, 0x2, 0xfff, 0xbe98, 0x1ff, 0x4, 0xe, 0x4, 0x1000, 0x4, 0x81, 0x93, 0x4, 0x3, 0x5, 0x1000000, 0x7, 0x9f, 0x7f, 0x9, 0x8, 0x4000000, 0xf4cf, 0x38000000, 0xaa3, 0x7800000, 0x81, 0x7ff, 0x101, 0x3000000, 0x3, 0x1, 0x3, 0x4, 0xffffffff, 0x71, 0x6, 0x8, 0x200, 0x5, 0x5, 0x44, 0x5, 0x6, 0x4, 0x7fffffff, 0x8, 0x8, 0xd, 0x3, 0x2, 0x10, 0xc, 0x1, 0x8, 0x7, 0x3, 0x0, 0x9, 0x7, 0x3c, 0x8, 0x43e5, 0x1, 0xb, 0x5, 0x8, 0x8, 0xfffffffe, 0x7, 0x2, 0x6, 0xa, 0x80000000, 0x4, 0x4, 0x5, 0x4, 0x81, 0x43, 0x1fe, 0x5bf, 0x9, 0xe621, 0x5, 0x4cc, 0x200, 0xffff6779, 0x9, 0xf2, 0x6, 0x0, 0xabc2, 0x3d, 0x0, 0xfb, 0x4, 0x8, 0x80000000, 0xfffffffa, 0x8, 0x3, 0xfffffff9, 0x4fb1, 0x9, 0xffffffff, 0x3, 0x10, 0x7ff, 0x505, 0x8, 0x4, 0xaa4, 0x2, 0x9, 0x1, 0x0, 0x6, 0x9, 0xfffffffd, 0x8, 0x2, 0x4, 0xb0, 0xdef, 0x4b, 0x40, 0xc59, 0x80, 0x4, 0x3, 0x0, 0x9, 0x0, 0x5, 0x9, 0x53, 0xd, 0x2, 0x7, 0xf0c, 0x1, 0xa4, 0x6, 0x2, 0xffffffff, 0x7ff, 0x0, 0x1, 0x4c7c, 0x2, 0x6, 0x0, 0xfff, 0x4, 0x3, 0x7f, 0xe, 0x1d0c, 0x0, 0x3, 0x7, 0x0, 0x8000, 0x3, 0x3, 0x1000, 0x2, 0xe68, 0x1, 0x9, 0x3, 0x4, 0x3, 0xfffffffc, 0x6, 0xffffffff, 0x9107, 0xffff, 0xfffffffa, 0x6, 0x5, 0x33, 0x5, 0x3, 0x100, 0x7, 0x976, 0x963, 0x0, 0x83, 0x80000001, 0x4, 0x2, 0x3, 0xe4, 0x2, 0x5, 0x8, 0x0, 0x9, 0x800, 0x1, 0x4, 0x9, 0x2, 0x2, 0x6, 0x6, 0x8, 0x7, 0x8, 0x3, 0x48, 0x2, 0xfffffffa, 0x10001, 0x4, 0x4, 0x8001, 0x5, 0xb15, 0x65e4, 0x2, 0x9, 0x1, 0x8, 0x60c52b22, 0xab, 0xfed, 0x443f, 0x4e2, 0x6, 0xf, 0xb, 0x3, 0x0, 0x14, 0x0, 0x7, 0x1, 0x81, 0x800, 0x6, 0x581c43ce, 0x0, 0x4, 0x6, 0x65d, 0x1, 0x1000, 0x285ad65c, 0xab, 0x4, 0x8, 0xb, 0x6, 0xdf, 0x2, 0x8000, 0x4, 0x5, 0x28, 0x10000, 0x4, 0x0, 0x9, 0x50, 0x7, 0x4, 0x4, 0x1, 0x1, 0x9, 0x9, 0x6, 0x0, 0x2, 0x1, 0x4, 0x4, 0x9, 0x1, 0x3, 0x1, 0x80, 0xd4, 0x80000001, 0xffffff9c, 0x2, 0x101, 0x6, 0x8, 0x7bc5, 0xfffffffd, 0x4, 0xf, 0x9de, 0x0, 0x98a, 0x8, 0x9, 0x6, 0xfffffffa, 0x7f, 0x3, 0x4, 0x200, 0x1, 0x7, 0xffffffff, 0x6, 0x29, 0x60, 0x800, 0xfffffffc, 0x5, 0x40, 0x5, 0x53, 0xffffff38, 0x4, 0x67, 0x9, 0x0, 0x6, 0x7, 0x4, 0x1, 0x2, 0x3, 0x6, 0x4, 0x1, 0x2, 0xc, 0x3, 0xffff0000, 0xc8c3, 0x2, 0x9, 0xaa73, 0x5, 0x3, 0xfffffff9, 0x1, 0x3, 0x9, 0x14, 0x80, 0x2, 0x401, 0x2, 0x3, 0x1, 0x0, 0x230, 0x1, 0x52, 0xfff, 0x8001, 0x5, 0x8001, 0x9, 0x7, 0x9, 0x5, 0x5, 0x80, 0x530, 0xbf, 0x9, 0x200, 0xfffffff7, 0x3, 0x5, 0x9, 0x4, 0x1, 0xff, 0x0, 0x800, 0x2, 0x7, 0x74f9c885, 0x6, 0x5, 0x2, 0x4, 0x9, 0x8, 0x7, 0x4, 0x3, 0x8, 0x0, 0xffff, 0x0, 0xfffffffc, 0x3, 0x8, 0x735, 0x5, 0xb92, 0x101, 0x7, 0x80000001, 0xf, 0x1, 0x7, 0x10, 0x3, 0xa, 0x9, 0x5, 0x1, 0x9, 0x2, 0x3, 0x6, 0x5e2d, 0xb, 0x6, 0x6, 0x3, 0xffffffff, 0x2, 0xfffffff9, 0x3, 0x8000, 0xa000000, 0x2e83, 0x92, 0x6, 0x6, 0x2, 0x5, 0x400, 0x2, 0x8, 0x4, 0x9, 0x4, 0x2, 0x9, 0x2, 0x1, 0xfffffff8, 0xffffffff, 0xb031, 0x9, 0x1, 0xa, 0x7f3, 0x8, 0x5, 0x76, 0xffffff88, 0x5908, 0x9, 0x3, 0x6, 0x0, 0x8, 0x81, 0x81ea, 0x0, 0x6, 0x8, 0x2, 0x0, 0x9, 0x9, 0x1, 0x5, 0x6, 0xc8b, 0x10, 0x4, 0xba, 0x3, 0x7, 0x8, 0x2, 0x1ff, 0x1, 0x4, 0x2, 0x7ff, 0x8, 0x0, 0x4, 0x2, 0x5, 0x2, 0x6, 0x7, 0x0, 0x3, 0x7fffffff, 0x6, 0x81, 0x6, 0x3, 0x3ff, 0x23, 0x7c, 0x8, 0x8, 0x5, 0xfffffffa, 0x5, 0x5, 0x80, 0x9, 0xffff, 0x6, 0xf, 0x80000, 0x3, 0x1000, 0x4, 0x5, 0x20e, 0x7, 0x0, 0x3, 0x80, 0xd2c4, 0x2, 0x0, 0xff, 0x6, 0x2, 0xa80e, 0x0, 0x3, 0x3, 0x3, 0x7, 0x10000, 0x7, 0x10, 0xfffffd6f, 0x7, 0x227336, 0x72237c9, 0x6, 0xffffffff, 0x3, 0xd871, 0x7f, 0x8, 0x7, 0xf, 0x6, 0x6, 0x5c62, 0xa, 0x7fffffff, 0x4, 0x6, 0x1000, 0x7, 0xe4, 0x81, 0x800, 0x6, 0x2bf8, 0xc7, 0x3, 0x3, 0x200, 0x86aa, 0x1a31, 0x10, 0x80000001, 0xfffffffc, 0x7e14, 0x5, 0x9, 0x8, 0x3, 0xd0000, 0x5, 0xac, 0x3, 0x8, 0x100, 0x50b, 0x6, 0x3, 0xd9, 0x2b6, 0x8, 0x8a45, 0x6, 0xa0, 0x15, 0x1a00, 0x0, 0x40000000, 0x8, 0x3, 0x3, 0x4, 0x5, 0x8, 0x1, 0x7, 0x10000, 0x3, 0x9, 0x9, 0x1, 0x6, 0x4f, 0x3, 0x0, 0x3, 0x7, 0xfffffbc2, 0x2, 0x6, 0xd, 0x1, 0x101, 0x0, 0x6574, 0xbea, 0x4, 0xaec3, 0x0, 0x401, 0xa7e5, 0x3ff, 0x9, 0x7f00, 0x7, 0x1, 0x1376, 0x12ea542, 0x0, 0x6, 0x8, 0xffff, 0x4, 0x3, 0x6, 0x9, 0xffff, 0x401, 0x802, 0xb31, 0x7, 0x8, 0x5, 0xfff, 0xec, 0x4, 0x9, 0x40, 0x6, 0x6, 0xc4, 0x1, 0x4, 0x1, 0x1, 0x2, 0x4, 0x3, 0x101, 0x1, 0x98, 0x5, 0x1, 0xfffffffe, 0x3, 0x3242b046, 0x3, 0x5, 0x3, 0x10, 0x7, 0x100, 0xfff, 0xd, 0x1, 0x4, 0x8ac, 0x3, 0x7, 0x5, 0x7, 0xf049, 0xb, 0x7, 0xfffffff9, 0xa0a, 0x85a, 0x5, 0x6, 0x62, 0xffffffff, 0x2, 0xc, 0xc0000000, 0x1, 0x3, 0x0, 0x5, 0x5, 0x1ff, 0xcb4, 0xb, 0xfffffffe, 0x2, 0x1, 0x10000, 0x1ff, 0x8, 0x5, 0x3, 0xf, 0xffff, 0x3, 0x8, 0x7f, 0xd33, 0x6e3, 0x919, 0x9, 0x9, 0x4, 0x7fff, 0x9, 0x7ff, 0x6, 0x6, 0x80000, 0x81, 0x1ff, 0x138, 0x1ff, 0x6, 0x5, 0xcade, 0x7fffffff, 0x401, 0x6617, 0xc31, 0x10000, 0x9, 0x6, 0x1000, 0x9, 0x61, 0x1, 0x77, 0x400, 0x3, 0x0, 0x3, 0xffffffff, 0x1, 0xfffffffb, 0x18, 0x2ad, 0x0, 0x98d, 0xeb23, 0x8, 0x8, 0x800, 0x6, 0x9, 0x8000, 0x7, 0xa1, 0x5, 0xa, 0x4, 0x411, 0x70e, 0x1, 0x1, 0x5, 0xc, 0x1, 0x6, 0xdd, 0x4, 0x4, 0x8, 0x8000, 0xffff, 0x2, 0xfffffffe, 0x3, 0x8, 0x9, 0x8, 0xa8, 0x3, 0xe3, 0x2a, 0x0, 0x4, 0x6f5, 0x8001, 0x30000, 0x9, 0x5, 0x740, 0x1, 0xc335, 0x5, 0x8, 0x1, 0x3, 0x4, 0xe, 0xffff, 0x5, 0xed8, 0x80000000], 0x5, 0x400}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f4, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) pselect6(0x40, &(0x7f0000000100)={0x0, 0xe54, 0xfffffffffffffffe, 0x1, 0x800, 0x5548}, 0x0, &(0x7f0000000240)={0x1f, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000013c0)='net/rt_cache\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)=0x24) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001480)={0x0, 0x0, 0x1, [0xd, 0x7, 0x6, 0x5, 0xa], [0x8, 0xe04, 0x3, 0x9, 0x4, 0x1ff, 0x8000, 0x5, 0x5, 0x0, 0x9, 0x7a02, 0x40000, 0x4, 0x6, 0x800, 0x8, 0xa421, 0x1d75222b, 0x3, 0xcf, 0x8000000000000001, 0x2, 0x1000, 0x1, 0x9, 0x200, 0x8, 0x6, 0x3ff, 0x21a, 0xf2, 0x6, 0x400, 0x3ff, 0x8001, 0x0, 0x401, 0x6, 0x306a7a01, 0x0, 0x9, 0x41d, 0xffff, 0x0, 0x1, 0xffffffff, 0xb, 0x6, 0x4, 0x9, 0x92f3, 0x94c, 0x1193aaad, 0x401, 0x6, 0x2, 0x11a, 0xc61, 0x1, 0x80000001, 0xffffffffffffff80, 0x400, 0x8, 0x80000001, 0x101, 0x7, 0x5, 0x9, 0xf, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5, 0x4, 0xff, 0x2, 0xfda, 0x9, 0x5, 0x3, 0x2, 0xfffffffffffffffc, 0x9, 0x2, 0x100000000, 0x8, 0x480000000, 0xb425, 0x6, 0x7f, 0x65, 0x5, 0x5, 0x1, 0x0, 0x0, 0x800, 0x2, 0x7ff, 0xb06b92, 0x4e1, 0x80000000, 0x0, 0x9, 0x4000, 0x3, 0x400, 0x9, 0x7, 0xc0e, 0x800, 0x7fffffffffffffff, 0x2, 0x4, 0x800, 0x9f93, 0x2, 0x9]}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000018c0)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="3a303030303030d401dbc14556504d30303430393667"]) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="ba258b09", 0x4}], 0x1) 3.877930776s ago: executing program 1 (id=197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt(0xffffffffffffffff, 0x4111, 0x4, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2.781866763s ago: executing program 1 (id=198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x24, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74f", 0x3a, r6) openat$dir(0xffffffffffffff9c, 0x0, 0x51f180, 0x100) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) 1.559905816s ago: executing program 1 (id=199): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) 1.347975977s ago: executing program 1 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt(0xffffffffffffffff, 0x4111, 0x4, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 564.3µs ago: executing program 1 (id=201): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8000, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x498, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0xffffffff, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x37], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x20000000, 0x3, 0xfffffffc, 0x4, 0x200800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x52, 0x1, 0xe24c5001d609a4b6}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffb}}, 0xe8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=202): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 88.350691][ T5791] cgroup: Unknown subsys name 'net' [ 88.591813][ T5791] cgroup: Unknown subsys name 'cpuset' [ 88.646430][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.616370][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.160050][ T31] cfg80211: failed to load regulatory.db [ 93.376932][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.418425][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.420659][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.447468][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.448253][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.448952][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.449786][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.450096][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.450388][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.457751][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.458245][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.459703][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.465862][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.469908][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.471896][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.477510][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.484813][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.494506][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.508435][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.517133][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.520352][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.526634][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.550401][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.553116][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.574519][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.548477][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 94.827291][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 94.833316][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 94.920860][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 94.927736][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 95.465224][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.467019][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.467950][ T5805] bridge_slave_0: entered allmulticast mode [ 95.472445][ T5805] bridge_slave_0: entered promiscuous mode [ 95.517132][ T5808] Bluetooth: hci0: command tx timeout [ 95.520673][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.520828][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.520979][ T5805] bridge_slave_1: entered allmulticast mode [ 95.522796][ T5805] bridge_slave_1: entered promiscuous mode [ 95.595932][ T5823] Bluetooth: hci1: command tx timeout [ 95.596123][ T61] Bluetooth: hci3: command tx timeout [ 95.596267][ T5808] Bluetooth: hci2: command tx timeout [ 95.755876][ T5808] Bluetooth: hci4: command tx timeout [ 96.006827][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.007045][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.007235][ T5803] bridge_slave_0: entered allmulticast mode [ 96.009295][ T5803] bridge_slave_0: entered promiscuous mode [ 96.166934][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.167104][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.167246][ T5804] bridge_slave_0: entered allmulticast mode [ 96.169155][ T5804] bridge_slave_0: entered promiscuous mode [ 96.206603][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.206874][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.207021][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.207227][ T5803] bridge_slave_1: entered allmulticast mode [ 96.209517][ T5803] bridge_slave_1: entered promiscuous mode [ 96.368086][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.368185][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.368393][ T5804] bridge_slave_1: entered allmulticast mode [ 96.370339][ T5804] bridge_slave_1: entered promiscuous mode [ 96.374804][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.477121][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.477230][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.477370][ T5806] bridge_slave_0: entered allmulticast mode [ 96.480056][ T5806] bridge_slave_0: entered promiscuous mode [ 96.483671][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.483801][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.483996][ T5807] bridge_slave_0: entered allmulticast mode [ 96.496292][ T5807] bridge_slave_0: entered promiscuous mode [ 96.887418][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.887576][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.887780][ T5806] bridge_slave_1: entered allmulticast mode [ 96.890047][ T5806] bridge_slave_1: entered promiscuous mode [ 96.891702][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.891931][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.892084][ T5807] bridge_slave_1: entered allmulticast mode [ 96.894196][ T5807] bridge_slave_1: entered promiscuous mode [ 97.060593][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.203106][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.205512][ T5805] team0: Port device team_slave_0 added [ 97.223843][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.359966][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.362123][ T5805] team0: Port device team_slave_1 added [ 97.440534][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.445422][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.595889][ T5808] Bluetooth: hci0: command tx timeout [ 97.639828][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.642651][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.676002][ T5808] Bluetooth: hci3: command tx timeout [ 97.676024][ T61] Bluetooth: hci2: command tx timeout [ 97.676053][ T61] Bluetooth: hci1: command tx timeout [ 97.836694][ T5808] Bluetooth: hci4: command tx timeout [ 97.840083][ T5803] team0: Port device team_slave_0 added [ 98.259120][ T5804] team0: Port device team_slave_0 added [ 98.260486][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.260499][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.260518][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.264447][ T5803] team0: Port device team_slave_1 added [ 98.449069][ T5804] team0: Port device team_slave_1 added [ 98.449880][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.449894][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.449915][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.528614][ T5806] team0: Port device team_slave_0 added [ 98.530772][ T5807] team0: Port device team_slave_0 added [ 98.719565][ T5806] team0: Port device team_slave_1 added [ 98.721688][ T5807] team0: Port device team_slave_1 added [ 98.801821][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.801836][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.801882][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.938514][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.938530][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.938550][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.940694][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.940738][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.940758][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.138474][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.138494][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.138536][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.237503][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.237518][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.237537][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.328244][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.328259][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.328279][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.427821][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.427840][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.427868][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.429013][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.429029][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.429057][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.525607][ T5805] hsr_slave_0: entered promiscuous mode [ 99.527252][ T5805] hsr_slave_1: entered promiscuous mode [ 99.676179][ T5808] Bluetooth: hci0: command tx timeout [ 99.755898][ T5808] Bluetooth: hci3: command tx timeout [ 99.755935][ T5808] Bluetooth: hci1: command tx timeout [ 99.755959][ T5808] Bluetooth: hci2: command tx timeout [ 99.768255][ T5803] hsr_slave_0: entered promiscuous mode [ 99.769884][ T5803] hsr_slave_1: entered promiscuous mode [ 99.771296][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 99.771450][ T5803] Cannot create hsr debugfs directory [ 99.915768][ T5823] Bluetooth: hci4: command tx timeout [ 100.036587][ T5804] hsr_slave_0: entered promiscuous mode [ 100.037561][ T5804] hsr_slave_1: entered promiscuous mode [ 100.038282][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 100.038309][ T5804] Cannot create hsr debugfs directory [ 100.273610][ T5806] hsr_slave_0: entered promiscuous mode [ 100.274598][ T5806] hsr_slave_1: entered promiscuous mode [ 100.275398][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 100.275426][ T5806] Cannot create hsr debugfs directory [ 100.287483][ T5807] hsr_slave_0: entered promiscuous mode [ 100.289214][ T5807] hsr_slave_1: entered promiscuous mode [ 100.290275][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 100.290304][ T5807] Cannot create hsr debugfs directory [ 101.755834][ T5823] Bluetooth: hci0: command tx timeout [ 101.836969][ T61] Bluetooth: hci3: command tx timeout [ 101.837474][ T5823] Bluetooth: hci2: command tx timeout [ 101.837528][ T5808] Bluetooth: hci1: command tx timeout [ 101.902935][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.945299][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.991098][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.995966][ T5808] Bluetooth: hci4: command tx timeout [ 102.030073][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.175112][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.203958][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.240267][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.284976][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.419349][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.471820][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.503171][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.557460][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.677745][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.736079][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.763138][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.801849][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.934626][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.967889][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.023623][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.057975][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.094470][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.180103][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.228635][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.229398][ T748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.279483][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.284383][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.284495][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.384613][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.428659][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.429678][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.434774][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.484113][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.484270][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.570158][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.574066][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.647556][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.647775][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.707846][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.708073][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.739221][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.781085][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.781323][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.829233][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.850367][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.850523][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.969838][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.024132][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.024244][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.073899][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.074062][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.163947][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.510304][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.536694][ T5805] veth0_vlan: entered promiscuous mode [ 104.584208][ T5805] veth1_vlan: entered promiscuous mode [ 104.792761][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.888916][ T5805] veth0_macvtap: entered promiscuous mode [ 104.929199][ T5805] veth1_macvtap: entered promiscuous mode [ 104.959962][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.996282][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.102298][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.171143][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.193840][ T5804] veth0_vlan: entered promiscuous mode [ 105.215145][ T1889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.228134][ T1889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.232724][ T1889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.266232][ T1889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.289620][ T5804] veth1_vlan: entered promiscuous mode [ 105.393830][ T5807] veth0_vlan: entered promiscuous mode [ 105.462153][ T5806] veth0_vlan: entered promiscuous mode [ 105.580649][ T5807] veth1_vlan: entered promiscuous mode [ 105.592734][ T5806] veth1_vlan: entered promiscuous mode [ 105.639253][ T5803] veth0_vlan: entered promiscuous mode [ 105.710983][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.711013][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.737617][ T5804] veth0_macvtap: entered promiscuous mode [ 105.744137][ T5803] veth1_vlan: entered promiscuous mode [ 105.773263][ T5804] veth1_macvtap: entered promiscuous mode [ 105.842906][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.842928][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.909114][ T5806] veth0_macvtap: entered promiscuous mode [ 105.927579][ T5807] veth0_macvtap: entered promiscuous mode [ 105.945996][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.979225][ T5806] veth1_macvtap: entered promiscuous mode [ 105.982342][ T5807] veth1_macvtap: entered promiscuous mode [ 105.993857][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.042067][ T5803] veth0_macvtap: entered promiscuous mode [ 106.044219][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.058785][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.078956][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.083059][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.091736][ T5803] veth1_macvtap: entered promiscuous mode [ 106.121880][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.138998][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.215231][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.233625][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.354663][ T1397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.363876][ T1397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.267915][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.271935][ T1397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.298857][ T1397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.328255][ T1397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.346017][ T1397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.403433][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.406193][ T1397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.450732][ T1397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.537533][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.572387][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.572407][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.594234][ T1397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.607091][ T1397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.625557][ T1397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.708984][ T1397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.841263][ T5792] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.908500][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.908524][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.029465][ T5792] usb 1-1: Using ep0 maxpacket: 32 [ 108.029814][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.029831][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.088663][ T5792] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.088687][ T5792] usb 1-1: config 0 has no interface number 0 [ 108.101761][ T5792] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 108.101798][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.101823][ T5792] usb 1-1: Product: syz [ 108.101841][ T5792] usb 1-1: Manufacturer: syz [ 108.101858][ T5792] usb 1-1: SerialNumber: syz [ 108.153060][ T5792] usb 1-1: config 0 descriptor?? [ 108.226284][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.226306][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.270894][ T5792] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.270936][ T5792] usb 1-1: selecting invalid altsetting 1 [ 108.270958][ T5792] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.325092][ T5792] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.337092][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.337118][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.339807][ T5792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 108.339985][ T5792] usb 1-1: media controller created [ 108.403461][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.546164][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.546186][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.713924][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.713947][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.907142][ T1507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.907176][ T1507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.534072][ T5931] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 109.623576][ T5792] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 109.623639][ T5792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 109.647408][ T5792] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 110.289209][ T5944] hub 6-0:1.0: USB hub found [ 110.315974][ T5944] hub 6-0:1.0: 1 port detected [ 111.184040][ T5792] usb 1-1: USB disconnect, device number 2 [ 111.401282][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.406026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.406100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.455152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.457664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.465738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.923689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.335741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.336022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.337187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.469384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 113.110909][ T5965] program syz.2.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.385943][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.738055][ T5933] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 114.738087][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.820673][ T5933] usb 3-1: config 0 descriptor?? [ 117.992741][ T5933] usb 3-1: can't set config #0, error -71 [ 118.142267][ T5933] usb 3-1: USB disconnect, device number 2 [ 118.719723][ T6002] hub 6-0:1.0: USB hub found [ 118.726124][ T6002] hub 6-0:1.0: 1 port detected [ 122.374035][ T6020] syzkaller0: entered promiscuous mode [ 122.374065][ T6020] syzkaller0: entered allmulticast mode [ 123.037820][ T6024] program syz.2.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.845753][ T5973] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.956359][ T5973] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 124.956398][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.972463][ T5973] usb 3-1: config 0 descriptor?? [ 125.127365][ T6027] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 126.492276][ T5973] ath6kl: Failed to submit usb control message: -110 [ 126.492332][ T5973] ath6kl: unable to send the bmi data to the device: -110 [ 126.492428][ T5973] ath6kl: Unable to send get target info: -110 [ 126.561473][ T5973] ath6kl: Failed to init ath6kl core: -110 [ 126.564026][ T5973] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 126.712027][ T192] usb 3-1: USB disconnect, device number 3 [ 127.678113][ T6045] input: syz0 as /devices/virtual/input/input5 [ 133.304820][ T6082] hub 6-0:1.0: USB hub found [ 133.376387][ T6082] hub 6-0:1.0: 1 port detected [ 134.942476][ T9] IPVS: starting estimator thread 0... [ 135.036775][ T6091] IPVS: using max 9 ests per chain, 21600 per kthread [ 139.110601][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.113162][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.897823][ T6117] hub 6-0:1.0: USB hub found [ 139.902804][ T6117] hub 6-0:1.0: 1 port detected [ 142.875762][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.968996][ T5973] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.970754][ T5973] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 144.989537][ T6151] hub 6-0:1.0: USB hub found [ 145.111371][ T6151] hub 6-0:1.0: 1 port detected [ 148.975903][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 149.287443][ T6172] netlink: 'syz.1.55': attribute type 4 has an invalid length. [ 150.050621][ T10] IPVS: starting estimator thread 0... [ 150.139011][ T5882] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 150.139033][ T5882] usb 5-1: config 0 has no interface number 0 [ 150.139057][ T5882] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 150.139120][ T5882] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.139139][ T5882] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.139155][ T5882] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 150.139174][ T5882] usb 5-1: config 0 interface 16 has no altsetting 0 [ 150.139199][ T5882] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 150.139216][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.143062][ T5882] usb 5-1: config 0 descriptor?? [ 150.169071][ T6174] IPVS: using max 7 ests per chain, 16800 per kthread [ 150.328405][ T6175] Zero length message leads to an empty skb [ 150.805888][ T5882] usbhid 5-1:0.16: can't add hid device: -71 [ 150.806052][ T5882] usbhid 5-1:0.16: probe with driver usbhid failed with error -71 [ 150.829383][ T5882] usb 5-1: USB disconnect, device number 2 [ 151.450800][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.571079][ T5808] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 151.605776][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 151.722858][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.723091][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.723120][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 151.778636][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.778668][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.778688][ T10] usb 3-1: SerialNumber: syz [ 151.833681][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.908686][ T6186] QAT: failed to copy from user cfg_data. [ 151.915734][ T5973] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 151.915760][ T5973] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 152.340332][ T6192] hub 6-0:1.0: USB hub found [ 152.343141][ T6192] hub 6-0:1.0: 1 port detected [ 153.238629][ T10] usb 3-1: USB disconnect, device number 4 [ 156.975817][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.975813][ T5973] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 156.975846][ T5973] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 158.855844][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 159.438341][ T6235] QAT: failed to copy from user cfg_data. [ 159.481383][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 159.481791][ T10] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.481821][ T10] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.481854][ T10] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 159.481882][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.481920][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 159.481945][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.995830][ T5808] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.069945][ T5973] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 160.070013][ T5973] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 160.587089][ T10] usb 4-1: config 0 descriptor?? [ 162.545546][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 162.547711][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.555247][ T10] usb 4-1: USB disconnect, device number 2 [ 162.795711][ T5973] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 162.795742][ T5973] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 162.864287][ T5808] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.001680][ T6277] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 167.209268][ T6279] program syz.3.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.525840][ T5810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.896002][ T6254] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.255740][ T6177] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.255939][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 168.262823][ T5810] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 168.262854][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.355927][ T5810] usb 5-1: config 0 descriptor?? [ 168.360749][ T6254] usb 3-1: Using ep0 maxpacket: 16 [ 168.377830][ T6254] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.377857][ T6254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.383335][ T6254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.383367][ T6254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.383388][ T6254] usb 3-1: Product: syz [ 168.383403][ T6254] usb 3-1: Manufacturer: syz [ 168.383418][ T6254] usb 3-1: SerialNumber: syz [ 168.459126][ T6177] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 168.459166][ T6177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.490149][ T6177] usb 4-1: config 0 descriptor?? [ 168.620921][ T5810] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 168.864695][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.867269][ T6254] usb 3-1: 0:2 : does not exist [ 168.876463][ T5810] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 168.876533][ T5810] usb 5-1: media controller created [ 168.896698][ T6254] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 168.993736][ T6177] ath6kl: Failed to submit usb control message: -71 [ 168.993788][ T6177] ath6kl: unable to send the bmi data to the device: -71 [ 168.993803][ T6177] ath6kl: Unable to send get target info: -71 [ 169.016993][ T6177] ath6kl: Failed to init ath6kl core: -71 [ 169.032360][ T6177] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 169.088489][ T6177] usb 4-1: USB disconnect, device number 3 [ 169.094037][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.364938][ T6254] usb 3-1: USB disconnect, device number 5 [ 169.716008][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.913166][ T5810] az6027: usb out operation failed. (-71) [ 169.913188][ T5810] stb0899_attach: Driver disabled by Kconfig [ 169.913199][ T5810] az6027: no front-end attached [ 169.913199][ T5810] [ 169.913619][ T5810] az6027: usb out operation failed. (-71) [ 169.913649][ T5810] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 169.963463][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 170.249221][ T5810] dvb-usb: schedule remote query interval to 400 msecs. [ 170.249240][ T5810] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 171.110412][ T5810] usb 5-1: USB disconnect, device number 3 [ 171.760409][ T5810] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 173.511869][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.576061][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.602894][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.610789][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.612205][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.756607][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.757129][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.757588][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.758945][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.761780][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.349112][ T6341] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET) [ 175.917219][ T5823] Bluetooth: hci5: command tx timeout [ 177.675857][ T5896] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.722514][ T6360] process 'syz.1.89' launched './file1' with NULL argv: empty string added [ 177.825809][ T5896] usb 3-1: device descriptor read/64, error -71 [ 178.004781][ T5823] Bluetooth: hci5: command tx timeout [ 178.055855][ T5896] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.195898][ T5896] usb 3-1: device descriptor read/64, error -71 [ 178.317393][ T5896] usb usb3-port1: attempt power cycle [ 179.356246][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.376521][ T5896] usb 3-1: device descriptor read/8, error -71 [ 179.679116][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.820163][ T5896] usb 3-1: device descriptor read/8, error -71 [ 180.345710][ T5823] Bluetooth: hci5: command tx timeout [ 180.389827][ T5896] usb usb3-port1: unable to enumerate USB device [ 180.871320][ T6385] hub 6-0:1.0: USB hub found [ 180.874920][ T6385] hub 6-0:1.0: 1 port detected [ 181.684640][ T6391] hub 6-0:1.0: USB hub found [ 182.023514][ T6391] hub 6-0:1.0: 1 port detected [ 182.215836][ T5810] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.381941][ T5810] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 182.381975][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.433575][ T5810] usb 5-1: config 0 descriptor?? [ 182.594620][ T5823] Bluetooth: hci5: command tx timeout [ 182.608812][ T3563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.678376][ T5810] ath6kl: Failed to submit usb control message: -71 [ 182.678429][ T5810] ath6kl: unable to send the bmi data to the device: -71 [ 182.678444][ T5810] ath6kl: Unable to send get target info: -71 [ 182.716860][ T5810] ath6kl: Failed to init ath6kl core: -71 [ 182.718400][ T5810] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 182.819609][ T5810] usb 5-1: USB disconnect, device number 4 [ 185.354830][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.667833][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 186.667925][ T10] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.667952][ T10] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.667974][ T10] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 186.668002][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.668036][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 186.668059][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.675462][ T10] usb 4-1: config 0 descriptor?? [ 186.806915][ T3563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.781698][ T3563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.611094][ T3563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.657593][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 189.657726][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.995273][ T10] usb 4-1: USB disconnect, device number 4 [ 191.595744][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.758096][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 191.758146][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.758172][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.758193][ T10] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 191.758219][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.758249][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 191.758271][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.789310][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 191.857932][ T10] usb 2-1: config 0 descriptor?? [ 191.907439][ T3563] bridge_slave_1: left allmulticast mode [ 191.907572][ T3563] bridge_slave_1: left promiscuous mode [ 191.922834][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.985745][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 192.049266][ T3563] bridge_slave_0: left allmulticast mode [ 192.049299][ T3563] bridge_slave_0: left promiscuous mode [ 192.049600][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.165855][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 192.173112][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.173178][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.173206][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 192.216071][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.216102][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.216124][ T5896] usb 4-1: SerialNumber: syz [ 192.293766][ T5896] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 194.731076][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 194.731211][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 194.789109][ T10] usb 2-1: USB disconnect, device number 2 [ 195.395800][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.501976][ T6284] usb 4-1: USB disconnect, device number 5 [ 195.548426][ T44] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 195.548450][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.573838][ T44] usb 5-1: config 0 descriptor?? [ 199.409321][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.449753][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.491393][ T3563] bond0 (unregistering): Released all slaves [ 199.685909][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.686018][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.636241][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.637151][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.637435][ T6219] bridge_slave_0: entered allmulticast mode [ 201.667980][ T6219] bridge_slave_0: entered promiscuous mode [ 201.691782][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.691917][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.692175][ T6219] bridge_slave_1: entered allmulticast mode [ 201.746525][ T6219] bridge_slave_1: entered promiscuous mode [ 201.855120][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.872317][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.886081][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.910051][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.925175][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.235848][ T5823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.884953][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.119426][ T6527] QAT: failed to copy from user cfg_data. [ 203.996393][ T5823] Bluetooth: hci6: command tx timeout [ 206.075873][ T5823] Bluetooth: hci6: command tx timeout [ 206.135878][ T3563] hsr_slave_0: left promiscuous mode [ 206.210035][ T3563] hsr_slave_1: left promiscuous mode [ 206.227859][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.227974][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.568198][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.568227][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.559393][ T3563] veth1_macvtap: left promiscuous mode [ 207.559693][ T3563] veth0_macvtap: left promiscuous mode [ 207.560022][ T3563] veth1_vlan: left promiscuous mode [ 207.560415][ T3563] veth0_vlan: left promiscuous mode [ 208.157199][ T5823] Bluetooth: hci6: command tx timeout [ 209.172739][ T6567] hub 6-0:1.0: USB hub found [ 209.175624][ T6567] hub 6-0:1.0: 1 port detected [ 210.235786][ T5823] Bluetooth: hci6: command tx timeout [ 210.692934][ T6577] QAT: failed to copy from user cfg_data. [ 214.495805][ T5810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.947075][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 214.969309][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.969371][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.969397][ T5810] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 214.970880][ T5810] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.970907][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.970927][ T5810] usb 4-1: SerialNumber: syz [ 214.999281][ T5810] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 215.599666][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.711313][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.728450][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.737373][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.738800][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.267536][ T5810] usb 4-1: USB disconnect, device number 6 [ 217.766212][ T5808] Bluetooth: hci0: command tx timeout [ 218.504599][ T3563] team0 (unregistering): Port device team_slave_1 removed [ 218.794883][ T3563] team0 (unregistering): Port device team_slave_0 removed [ 219.855866][ T5808] Bluetooth: hci0: command tx timeout [ 221.775089][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.804454][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.838425][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.862202][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.863266][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.920985][ T5823] Bluetooth: hci0: command tx timeout [ 222.268688][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.858428][ T6636] QAT: failed to copy from user cfg_data. [ 223.915930][ T5823] Bluetooth: hci4: command tx timeout [ 223.995722][ T5823] Bluetooth: hci0: command tx timeout [ 226.023765][ T5823] Bluetooth: hci4: command tx timeout [ 228.075916][ T5823] Bluetooth: hci4: command tx timeout [ 229.813214][ T3563] IPVS: stop unused estimator thread 0... [ 230.157520][ T5823] Bluetooth: hci4: command tx timeout [ 232.495748][ T44] ath6kl: Failed to submit usb control message: -71 [ 232.495810][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 232.495826][ T44] ath6kl: Unable to send get target info: -71 [ 232.496783][ T44] ath6kl: Failed to init ath6kl core: -71 [ 232.498325][ T44] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 232.704756][ T44] usb 5-1: USB disconnect, device number 5 [ 236.083740][ T6713] QAT: failed to copy from user cfg_data. [ 237.695454][ T3563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.848612][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 237.865331][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 240.187894][ T3563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.079682][ T3563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.253840][ T6627] chnl_net:caif_netlink_parms(): no params data found [ 242.365843][ T5896] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.443559][ T3563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.515736][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 242.519873][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.519916][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.519935][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 242.521024][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.521043][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 242.521058][ T5896] usb 2-1: SerialNumber: syz [ 242.627733][ T5896] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 243.509281][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.509978][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.511350][ T6516] bridge_slave_0: entered allmulticast mode [ 243.525210][ T6516] bridge_slave_0: entered promiscuous mode [ 243.540673][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.548433][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.548738][ T6596] bridge_slave_0: entered allmulticast mode [ 243.571672][ T6596] bridge_slave_0: entered promiscuous mode [ 243.642483][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.643218][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.650479][ T6516] bridge_slave_1: entered allmulticast mode [ 243.665649][ T6516] bridge_slave_1: entered promiscuous mode [ 243.768302][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.768432][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.768620][ T6596] bridge_slave_1: entered allmulticast mode [ 243.770723][ T6596] bridge_slave_1: entered promiscuous mode [ 244.932955][ T10] usb 2-1: USB disconnect, device number 3 [ 244.990859][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.029291][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.029653][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.031412][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.031641][ T6627] bridge_slave_0: entered allmulticast mode [ 245.049073][ T6627] bridge_slave_0: entered promiscuous mode [ 245.063817][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.157343][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.159754][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.159909][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.160120][ T6627] bridge_slave_1: entered allmulticast mode [ 245.168994][ T6627] bridge_slave_1: entered promiscuous mode [ 246.671320][ T6516] team0: Port device team_slave_0 added [ 246.689373][ T6596] team0: Port device team_slave_0 added [ 246.703047][ T6516] team0: Port device team_slave_1 added [ 246.727156][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.744283][ T6596] team0: Port device team_slave_1 added [ 247.794977][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.213817][ T3563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.958900][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.958914][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.958934][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.425741][ T6813] input: syz0 as /devices/virtual/input/input10 [ 254.800829][ T3563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.439306][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.439325][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.439354][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.440824][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.440838][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.440865][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.570435][ T6627] team0: Port device team_slave_0 added [ 255.629033][ T6627] team0: Port device team_slave_1 added [ 256.358598][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.358617][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.358645][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.535432][ T6833] hub 6-0:1.0: USB hub found [ 256.538357][ T6833] hub 6-0:1.0: 1 port detected [ 260.682696][ T3563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.828784][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.828861][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.896580][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.896599][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.896629][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.124790][ T6855] hub 6-0:1.0: USB hub found [ 262.128182][ T6855] hub 6-0:1.0: 1 port detected [ 262.903594][ T6516] hsr_slave_0: entered promiscuous mode [ 262.905181][ T6516] hsr_slave_1: entered promiscuous mode [ 263.044491][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.044512][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.044541][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.529092][ T3563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.635764][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 265.108162][ T31] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 265.108193][ T31] usb 4-1: config 0 has no interface number 0 [ 265.108242][ T31] usb 4-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.108281][ T31] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 265.108305][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.123297][ T31] usb 4-1: config 0 descriptor?? [ 265.241845][ T6596] hsr_slave_0: entered promiscuous mode [ 265.248992][ T6596] hsr_slave_1: entered promiscuous mode [ 265.255914][ T6596] debugfs: 'hsr0' already exists in 'hsr' [ 265.255949][ T6596] Cannot create hsr debugfs directory [ 265.336577][ T6092] usb 4-1: USB disconnect, device number 7 [ 265.490214][ T6627] hsr_slave_0: entered promiscuous mode [ 265.494960][ T6627] hsr_slave_1: entered promiscuous mode [ 265.497579][ T6627] debugfs: 'hsr0' already exists in 'hsr' [ 265.497612][ T6627] Cannot create hsr debugfs directory [ 267.527959][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.528216][ T5792] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 267.528236][ T5792] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 267.667914][ T3563] bridge_slave_1: left allmulticast mode [ 267.667943][ T3563] bridge_slave_1: left promiscuous mode [ 267.668193][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.739750][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'. [ 269.652609][ T3563] bridge_slave_0: left allmulticast mode [ 269.652647][ T3563] bridge_slave_0: left promiscuous mode [ 269.652909][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.749767][ T3563] bridge_slave_1: left allmulticast mode [ 269.749800][ T3563] bridge_slave_1: left promiscuous mode [ 269.750141][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.755832][ T5792] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 269.756122][ T5792] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 269.763078][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.906837][ T3563] bridge_slave_0: left allmulticast mode [ 269.906861][ T3563] bridge_slave_0: left promiscuous mode [ 269.907045][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.996629][ T3563] bridge_slave_1: left allmulticast mode [ 269.996654][ T3563] bridge_slave_1: left promiscuous mode [ 269.996955][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.057319][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.103454][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.120994][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.123461][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.124370][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.164664][ T3563] bridge_slave_0: left allmulticast mode [ 270.164693][ T3563] bridge_slave_0: left promiscuous mode [ 270.165277][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.190225][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.190856][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.191406][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.192998][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.194031][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.996677][ T6904] input: syz0 as /devices/virtual/input/input11 [ 271.207456][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.327296][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.388178][ T3563] bond0 (unregistering): Released all slaves [ 272.237884][ T5823] Bluetooth: hci3: command tx timeout [ 274.318908][ T5823] Bluetooth: hci3: command tx timeout [ 275.286721][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.366711][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.409711][ T3563] bond0 (unregistering): Released all slaves [ 276.603304][ T5823] Bluetooth: hci3: command tx timeout [ 277.585463][ T6927] hub 6-0:1.0: USB hub found [ 277.586878][ T6927] hub 6-0:1.0: 1 port detected [ 278.336721][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.396836][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.430269][ T3563] bond0 (unregistering): Released all slaves [ 278.635780][ T5823] Bluetooth: hci3: command tx timeout [ 280.418989][ T6106] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 281.125709][ T6106] usb 4-1: Using ep0 maxpacket: 32 [ 281.127644][ T6106] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.127671][ T6106] usb 4-1: config 0 has no interface number 0 [ 281.129947][ T6106] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 281.129972][ T6106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.129986][ T6106] usb 4-1: Product: syz [ 281.129997][ T6106] usb 4-1: Manufacturer: syz [ 281.130007][ T6106] usb 4-1: SerialNumber: syz [ 281.134566][ T6106] usb 4-1: config 0 descriptor?? [ 281.223067][ T6106] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 281.223090][ T6106] usb 4-1: selecting invalid altsetting 1 [ 281.223101][ T6106] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 281.250971][ T6106] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.251332][ T6106] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 281.251372][ T6106] usb 4-1: media controller created [ 281.304903][ T6106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.483505][ T6933] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 282.496249][ T6106] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 282.496326][ T6106] zl10353_read_register: readreg error (reg=127, ret==-71) [ 282.498946][ T6106] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 282.864136][ T6106] usb 4-1: USB disconnect, device number 8 [ 284.314732][ T5933] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 284.314806][ T5933] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 284.581314][ C0] ------------[ cut here ]------------ [ 284.581370][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 284.581426][ C0] WARNING: kernel/workqueue.c:2252 at 0x0, CPU#0: ktimers/0/16 [ 284.581463][ C0] Modules linked in: [ 284.581503][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 284.581534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.581553][ C0] RIP: 0010:__queue_work+0xd88/0xff0 [ 284.581585][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 99 24 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 10 2a [ 284.581605][ C0] RSP: 0000:ffffc900001577f0 EFLAGS: 00010082 [ 284.581625][ C0] RAX: 1ffff11007533153 RBX: 0000000000000008 RCX: ffff88801b6ddac0 [ 284.581642][ C0] RDX: ffff8880303d5168 RSI: ffffffff89c26720 RDI: ffffffff8edd1c50 [ 284.581660][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 284.581674][ C0] R10: dffffc0000000000 R11: ffffffff818a7370 R12: dffffc0000000000 [ 284.581692][ C0] R13: ffff88803a998a98 R14: ffffffff8edd1c50 R15: ffff8880303d5168 [ 284.581710][ C0] FS: 0000000000000000(0000) GS:ffff888126d52000(0000) knlGS:0000000000000000 [ 284.581729][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.581746][ C0] CR2: 0000200000db4030 CR3: 0000000053ab6000 CR4: 00000000003526f0 [ 284.581766][ C0] Call Trace: [ 284.581774][ C0] [ 284.581800][ C0] call_timer_fn+0x16e/0x590 [ 284.581838][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 284.581868][ C0] ? call_timer_fn+0xbe/0x590 [ 284.581902][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 284.581949][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 284.581978][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 284.582010][ C0] __run_timer_base+0x709/0x970 [ 284.582061][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 284.582114][ C0] run_timer_softirq+0xb7/0x180 [ 284.582149][ C0] handle_softirqs+0x226/0x6d0 [ 284.582188][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.582228][ C0] run_ktimerd+0xcf/0x190 [ 284.582259][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 284.582287][ C0] ? schedule+0x91/0x360 [ 284.582324][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 284.582361][ C0] smpboot_thread_fn+0x542/0xa60 [ 284.582393][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 284.582433][ C0] kthread+0x711/0x8a0 [ 284.582470][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 284.582500][ C0] ? __pfx_kthread+0x10/0x10 [ 284.582529][ C0] ? rt_spin_unlock+0x150/0x200 [ 284.582558][ C0] ? rt_spin_unlock+0x161/0x200 [ 284.582594][ C0] ? __pfx_kthread+0x10/0x10 [ 284.582629][ C0] ret_from_fork+0x599/0xb30 [ 284.582658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 284.582697][ C0] ? __switch_to_asm+0x39/0x70 [ 284.582736][ C0] ? __switch_to_asm+0x33/0x70 [ 284.582768][ C0] ? __pfx_kthread+0x10/0x10 [ 284.582803][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.582857][ C0] [ 284.582868][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.582885][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 284.582912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.582925][ C0] Call Trace: [ 284.582934][ C0] [ 284.582943][ C0] dump_stack_lvl+0x99/0x250 [ 284.582975][ C0] ? __asan_memcpy+0x40/0x70 [ 284.583005][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.583036][ C0] ? __pfx__printk+0x10/0x10 [ 284.583075][ C0] vpanic+0x237/0x6d0 [ 284.583108][ C0] ? __pfx_vpanic+0x10/0x10 [ 284.583137][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 284.583168][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 284.583207][ C0] panic+0xb9/0xc0 [ 284.583239][ C0] ? __pfx_panic+0x10/0x10 [ 284.583282][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 284.583323][ C0] __warn+0x317/0x4b0 [ 284.583369][ C0] __report_bug+0x288/0x500 [ 284.583395][ C0] ? call_timer_fn+0x16e/0x590 [ 284.583428][ C0] ? __run_timer_base+0x709/0x970 [ 284.583458][ C0] ? run_timer_softirq+0xb7/0x180 [ 284.583500][ C0] ? __pfx___report_bug+0x10/0x10 [ 284.583527][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 284.583570][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 284.583607][ C0] report_bug_entry+0x16a/0x220 [ 284.583635][ C0] ? __queue_work+0xd88/0xff0 [ 284.583661][ C0] ? __queue_work+0xd8d/0xff0 [ 284.583687][ C0] handle_bug+0xca/0x200 [ 284.583722][ C0] exc_invalid_op+0x1a/0x50 [ 284.583754][ C0] asm_exc_invalid_op+0x1a/0x20 [ 284.583776][ C0] RIP: 0010:__queue_work+0xd88/0xff0 [ 284.583804][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 99 24 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 10 2a [ 284.583824][ C0] RSP: 0000:ffffc900001577f0 EFLAGS: 00010082 [ 284.583845][ C0] RAX: 1ffff11007533153 RBX: 0000000000000008 RCX: ffff88801b6ddac0 [ 284.583862][ C0] RDX: ffff8880303d5168 RSI: ffffffff89c26720 RDI: ffffffff8edd1c50 [ 284.583880][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 284.583894][ C0] R10: dffffc0000000000 R11: ffffffff818a7370 R12: dffffc0000000000 [ 284.583912][ C0] R13: ffff88803a998a98 R14: ffffffff8edd1c50 R15: ffff8880303d5168 [ 284.583936][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 284.583969][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 284.584020][ C0] call_timer_fn+0x16e/0x590 [ 284.584055][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 284.584084][ C0] ? call_timer_fn+0xbe/0x590 [ 284.584120][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 284.584168][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 284.584195][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 284.584227][ C0] __run_timer_base+0x709/0x970 [ 284.584278][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 284.584329][ C0] run_timer_softirq+0xb7/0x180 [ 284.584370][ C0] handle_softirqs+0x226/0x6d0 [ 284.584408][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.584448][ C0] run_ktimerd+0xcf/0x190 [ 284.584478][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 284.584507][ C0] ? schedule+0x91/0x360 [ 284.584542][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 284.584571][ C0] smpboot_thread_fn+0x542/0xa60 [ 284.584604][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 284.584644][ C0] kthread+0x711/0x8a0 [ 284.584681][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 284.584710][ C0] ? __pfx_kthread+0x10/0x10 [ 284.584740][ C0] ? rt_spin_unlock+0x150/0x200 [ 284.584769][ C0] ? rt_spin_unlock+0x161/0x200 [ 284.584790][ C0] ? __pfx_kthread+0x10/0x10 [ 284.584824][ C0] ret_from_fork+0x599/0xb30 [ 284.584858][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 284.584896][ C0] ? __switch_to_asm+0x39/0x70 [ 284.584928][ C0] ? __switch_to_asm+0x33/0x70 [ 284.584959][ C0] ? __pfx_kthread+0x10/0x10 [ 284.584994][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.585048][ C0] [ 284.585325][ C0] Kernel Offset: disabled