last executing test programs: 32m6.433209506s ago: executing program 1 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f0000000540)="64b61d9b104c99", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) 32m5.691607194s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001140)='io_uring_task_add\x00', 0xffffffffffffffff, 0x0, 0xd12}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x1, 0x40448c0) shutdown(r3, 0x1) 32m4.974242098s ago: executing program 1 (id=11): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 31m54.862457164s ago: executing program 4 (id=22): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[{0x90, 0x10f, 0x7, "d32690a20ef0aaa7256bd5ab52aadb5c6c79db7c1267b90c92bcc56b28420c20219c53f1c4574c9d0003ce690a3767642fa880f30760fc737ff318842e5077338a770bb70ac0fe7fb1d2f9b3871e25abc1468e91bb228a7e1a01bb6196e3817f56552393a48649e7aa86e1258f70e8836b33d1d03593aed22a0d45b9a0"}, {0xb8, 0x103, 0x9, "b0716dca88e49ab070da46a96d6d20e362fa2e4b08dfac36805de24f36b87826c60d140fb33078803e1b0f34d979ddb60aae81baea63f87a3a0386358a7e80b39e78266ed4729eadcd667eb70c0885b8d38ee74ed28ba88c5190afa26b9e4f14deb1ca4e84efa53560e37ee6baf1534bbb3c59bca5bf83edffd4b5c49d753caa881e30eeb78298fe5fe7ee2c2b16e180837bec99b3db323601adf8d618fce256a4caa5fe23f676"}, {0x10, 0x10d, 0x5}], 0x158}}], 0x1, 0x20004000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) open_tree(0xffffffffffffff9c, 0x0, 0x800) socket(0x2, 0x80805, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0xff2, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) listen(r0, 0x3841b273) 31m53.421444461s ago: executing program 4 (id=23): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r4, 0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) 31m52.870259744s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001140)='io_uring_task_add\x00', 0xffffffffffffffff, 0x0, 0xd12}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) 31m52.259825597s ago: executing program 4 (id=25): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001000010400"/20, @ANYRES32=0x0], 0xa0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x5}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 31m51.25500369s ago: executing program 1 (id=26): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) 31m50.282673245s ago: executing program 4 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 31m49.536688878s ago: executing program 1 (id=30): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x60000) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4, 0x10000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) unshare(0x24020400) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x292701, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000140)={0x181e1001, 0x5000, 0x1}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r9}, "43e2b7d22100730c31ea137a7aa7f01c058926771706f8fa255b4e3b783b6b5c2909f8b0721425a9f488ef34440555dde1244114a1c7078205705ffc6fb3bf10386aaf906f3318c533f20ee90aea803edf88d87d713813d35d039a15e9d5a905b9708d6aaef4ddf0f84219b1fc18b98d67debb6a83f6f31b7f15c799d260afdd63bc586c30b03fb7acb3fa5030d236151b2bdfebaee7bf21ba7a686524496f954a8e4e7af6fb559297d72c3805ddd737fa98015c9323de855aa7f47ce7552d66e69f1325d5bcf4c3901971d8c124a7b9da3433ae3f1cacd249a571ce60256dda0429ad63afeeba8513c63fcae7560866eee2b639de380d8c5dca46f1721a67476d07f144a3e621e460fef67018854be37fcaa3c9eed821cba2b0af7c0f77b54b743e0126654d70ffea6a240843414bcade324b18062c856c260e9c482487d8214dc2a6e0578704464d0468cf98cc15d43974f099ef48222624ada27de95a8f772ac4d1fdd4d97f83054c2bce95dc2eb2fa96a394c711121757ef612da97157daed86522f56becf18addb00367a061a4a824b83de3ad626f2975190415ac0485b8a8d68d8bac2dab17577c749c6b1a175f56d6db90bb7c54002e69d797242e9e59495a41cb73673272bb9f52d821d6c68999acb9775cda279cdd240808b8edf104fc79156fb28f042cadc7d785e15788cc056a97cfb48b74c55bcaccf3f5ae3eafffd4f90a6c3c60709f8372b50fec791e447b8ba2eb39da5a7ab9cf7fb151855cdaa09502b854c9f87262b05f637878435e36cc3bc31995199815c3a2b9f0b247be12cf0a1fea82277533aa9bbc3597939521222fbc0dff23407622594b37b58b7f147129a6355531038281c24d9769401513be803ccd4a4df5487a30a003857bbf34716a8ecba07a04723a532fe4f39fe2f9af4f65e41d5880dd770e93a1753b531dbf212539c5ae5a63a9a2bdaff27e4620ada11cd9537b4108db11f6fb75ae582d81bade9a7be821b9799922bcf50c350ff2813aa52f33df353c78e31fbcf25f207fc47b5844e2cc7227053c1a3fb3c2eb3403dba4aabbc3341a2c1ceabc31a0ed0a07850db4f2381f4b1ad1792de830159e2b3854920aefe741e817e64ae30f86d8e7723772ebe19835e1ba3cff2890059486dd7589644f8f48b2b64118baee2471bb176b6ad17d94c43913305fa07321b0b28af8b05ecbd44acc3230bc6812a96b6091da440f02b787babdf97fa225bba35eabc2ff704c0b43893da24ead30377a13674ccbf0e035ccbe555cb1689070c4d422e58e1153d90482d0b209cfca40ff17cfba48edaf1dc703cff0e50c7a6cbcb3b3479c008872323f4bb512aecb560deb390519a84dfdf228d4d22b2f188179f2cc001ffade449410be906bdd6167f56e7e2c200cf3e2acdcea87c7d1ba8d141d26da81ca0bd097d319c1d2d89a4076e02186bbf23847c08546243a03187c8dc573d91dd35c0fb66f496fd2673271d101927ad75d9a32bf63bede6fe48fc8fe35c199c4500ff9a0fecfbb41eba1b5654705d1a2273c27052a0a3f0d2e1575e426369c20c69c3a98c9e751e05f757c2c1ceeeb695fe24e995ab8bb4ef0e3ae5c56aa6c24cec8c237391c33464a52babe6bb375cb61e2fc6ab6f1a5e5ace40c633d3cfc566406b3e876af17a46f8b6f7ad4cea50d03450e64c0b868559ee0fc60ab15bedd9963d167024b758c6420eb8652f90888af930a448fd6b50537b289e63ab873530ee0b83e923c5a5dda5389ebf8ce7c7a147d08a7c3f5a2204ec710b76b428b84b0da7ae1308e5fb32aff69be3956fc78dc2da58355730c30190937e183b974f20cfb0359b780bbd282309a375c5fffc14f9cd5a8d92c3e6c076724f30ba6b1bea682d6bb92837bd0cf14ff8d698e067c90c2370edd090f7f04d6e5b940eba09d656b46532214b670be0b1f7d6933eb8e68e5d7556a33153a106513a7646170e649373426a13103ae5e87cc95ce8e2d5816570ea3f1760b6be65fe7418bd13cea1af12bbf10f80a50d3c165b78aa8a7ddd3f8cafcfbb6feb817913c1205cd7f03d8d79fdaa6f164d068485c5d028569cdd040eb9c150bcb27a21fd44a3225e888c4bae68372221552456f2c9d4d7774643344bd6683eeedc2fe5b185e0eee5c9dddfd719b78760f61fa8fb63877158b7923ce917eb131736c2d87bc1d6180e2fcf15e5fe4cf1a95bb0b7f07232a98d32d3ffafd3c3e99abdaeb13aa9d036c7fea9f8430e65779881bdd7f6c836137d6beb2892fb3962a5b4d8b4c291cb4340fd078616a0a189eebe809554dc5eac7a7a2c5bd2bdb99564ec9892a98e4f14251ceda789c469eca057c6c92462539df38ce808bf6a7e57fa0f82e1775f25758527d580ff7fd73acb7f71d9bc53e476d736416320655c94005287659b59bfe16d96e6a0e8184d45da75e3d83bd48f0e136def61760fa83624065c406a4b2f76eba2896a27824a85852058a6cde3ffdb7e14a6bc1159d852817c24641c269ca49ddd87af72d34059b835d5e5dc5fd1cb3eb5fe2dc524243d0cb9e52e6f0615e35e314dcf535a3ca36bdd78d191e0f167a0992900b92dfcb842fcd6d855541db9debd21df8398f7898f7863e64ffa36b7fe69467a82bf4ebf9a9c6e2ee26c7c5fcbc87992d7a6031e5dd764cf4fa6263a0bcebfe2de4bf8d24def4e14136c18f6fc9a4add916e35c4528c0fa2361f534e113916ba0117572dd361ce3819541cbeb9def515737992b6150600d2da4ef806dd4e34f9f1ed506732bcccdf3551629f7fae8cf6c85286a8fc0b33385c72edfe99532444163ebc7e987c7c3412b11ba71d780162a4e022b87009efd809c633114c6d08f9546699ab3c4386571ae6a112a91fc4b977026958f88eb93bc094d026217a1d145e428eb0453aaee8a7fcbca9bc7c42772a70943b8a133e6af33f2f6b7f3c365c8814abf856e6ff761534024fef2de4d769f1501d0d6652c9a2292c950022f26cb5ecd7e665bf5d156c30e81b81db481d933a47aeb6b9456a9169ded5175e0463aac3ba1a5420afdf9026bf356adbe4a4e12b3ca12dfea63f864515a528d09af9b05458d082013d4a4b06551b4dba3259c9668eefaf9139c40150689a2aa4068810acdb386bedbbc363a6923903e5d54a9992773e25b25120bc93fedd19ab0a5fb382e7eb94949ddcc6ac87121b86faae09802b5dd65e46a096664f0f340680c0cc23381dc7f2eb66382f3cb93921ed08782ba1652aae1c42aaff5d7949eb83e41fd39769ab7ff3549480753dbd081b052dab8769252813eabd360bcf17abddb987d3a6b842e654a8b623b61a0d08a65edfd39a3119ae8ccc5a140f816495e9f5314144d19a32cb6fef3fcec97387d1643ff646901b3aa53a743efc27d17f090d42b87754689ce7b470a64c3d07642d58bee66725f7cdf141c0818d5fce93db9ed2dde37f9e03d6fc93a4fff3624aaf1d91a7dee748e5e78d4482be53849335b5191726288c1dbf1b307db03362a336de2f13cb390fcfbc0a6a8ae19d08c2c7b4969165c42e73c7658dd489fa7764899bcee9463a77a436d4fb1afb984c3141fbc560aeffbea4975ff4b32508ed2a1cf43a5fd94d24c8c5c6b5303519076d1bdef5c892d422f68d52940d9edc27d5e14c36a67c9374dfb850c7827f0f91e14d3244e92a20e6a15d269cd8de2947180d8199a98c16c231bf5e6fe93502871501fbc5797ed7749f05a7b2fb27b9a0284f61f79a9a3c5f536d8c03c066ef44909c2fa7cea68bcaca234c3731e7b8a313f7347ed6f40268a607daf4a012cc793dc1b66d69dfbd0bf7430775c3d17c8cb26b449022fbf1e5f0cd7926bf3a001654b66509688d43a7a6fa53be2d9d3f2fccb1c8ef61c6dde1d28751850e53c7916706e1a1e92e1f59bfaf4d3029bf4c78ed67a9e0d33392c2d5b34eaba279b2cb115d39f026b9c83bb5ee82da513549537f8b0b6253505d90f76898b05c4d4facf4b22ca01597443bdf8b296c476a38feddb8b4716c07b88773174ae592eab888323495ce1e91102812bc7efd4e959a958b8f56b27047017e2c41f48cebe8132fc8d9daa4d1c75409ae98f78daba26e24751e7a2667dea98591e2afa60f7470a4230c6e358e0346bb53a7020c79fe23f86095c9db2f38cbb4deb5e0824300ff6381cc7e08248e36e9bc4fbdfeaabb1fd5209ca08a079af86b98c39d1c8444351276a89c86d4f39524b15fbcb9f489ad88e7b9f65b50f9a97e4ce06f91ba556fbe39daf38167b62e79c887f8f8d24c5a2cbfbfc4c8080e26ed4b006fcfbe898ee0548b3986c452d19699d146f2ab96dcfc7a2fefe1ce0e02ae2343320498a4badc8835a422897bdd7a501399166090b0f3e3d2e1406c4fa713f8e9f5b34ee573fbc6914e46d631352c4ed9a41e6f8c611c11ce037f145909b55ee6b799f8e7e2ccd78754b7606f06a5158b36a8b1f4d53d4bbc13397d1feb1ccf744d28c3c5aadc3f541343b93b01a013e376bd45ec9c46866f4314b122782573a36f858b888f054592d9b306501e6d110451b9616c481871026628943b5167a81bbea733ad4335d71b611a09df0f98713f7699443ee55d62d79f36211053e8923e637c1fe4ce3d241761c501dbc374a19818a07973f983b66d58ca75691ed481a37b980a9ec598ed762d2ea7c51a1d30537633a13a16414b981b5c82b638c26313f7062cabac31b3e039586f12b5a8a8770160a2d7d4868e512406e8675daf01a299a869272218fac473ca6f8ca966c2461a1f739a5d60627071227969f40adf9c8447982157737a4bbe2938dd94bea3e1c109cf413a6157e2eaa807bd00fe0eae3b93f601a1c9ef785d29d0c15acaa8f8e19493fbc48795f3c6804a71c274b75dc908a7fe75ce7b1c3d61a5c14a8ae1f2a0be1a261e1a959c444afa07ce4aaf06913ca1749b11f14ba738efe845ff00a0a86a4aa2d1b9545142c8f9b264a17b20e6860eb4e20869d00d2e3a67cca690954adc7a43dc2ed2eef291fdcd90a229811b5ba179d67a5035767d59ac53db243ea126532a74e6348e0134c9a031b2e1ce6ffb77d64d8ce9e81ff04f18daea2120ccec90da3394eba93b8951189001881808bcb512960d6082d28cbc17e12636f99a6bf4c453e2d7be8c7cd99579f5673216d9a8017ab2eb9cf736744a008edc268f2fdd741dd2a2692c8d383a8bb801d6e659ad891ec396fb057323e4375011a8c49c24a6f4849bd1b8c97977d553b49eab307906f78b19e43a9db2809e104e5c7b3895081b879c7e9b52bbae76a971998c99a5fcf2f5a2ea53a4b901ade4d6e5ae423177b2e7cd05842557db0514744dc86b2ff47e100e6894fc03fa527784f1de2c73aafb6978ace5be50b28c404a001ad6650a4821c0aca1f9e11b3ba2a67a3b7cc7ea91487db65d0ab9aa14fcf6e2e5d5d397604b0195a80a14d938a2f25768b3395c33af64891e4001a3006d28859debd05e1758ab4d6e3d65158d3199a1b9822fae954d7ab94c48f6daeb62cab192a50aba5c405804ed3442f3b2aa48dd65b714be42c64b07f879ecad0c64a1d42cbcda8aa6d0b2dbc19ca0ede2342f033689318110ad14bb02eedb819339f2ab502dc346beee490f9c285522de9899cfbd1fcad76659fb8a06b407a78a7dadd2a31459ed7c95d25ba7d42f506d1a8a32a25cdae05e49d88c925b62baffbc921279a444d240a15f2a2f55e7b2a5ae0c56e25b67f47c1304d4e8df6ec66f09d54efa852ae8797685b50e8b809b3c6d33eabe34fc8324debd04"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) fcntl$notify(r6, 0x402, 0x8) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) 31m40.547980087s ago: executing program 4 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001140)='io_uring_task_add\x00', 0xffffffffffffffff, 0x0, 0xd12}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) 31m38.765884053s ago: executing program 4 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000580), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x0, 0x0, 0x1200) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{}, {0x0, 0x2}, {}, {}, {}, {0x4000}], 0x0, 0x0, 0x16, 0x1}}) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 31m33.563437215s ago: executing program 32 (id=30): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x60000) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4, 0x10000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) unshare(0x24020400) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x292701, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000140)={0x181e1001, 0x5000, 0x1}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r9}, "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) fcntl$notify(r6, 0x402, 0x8) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) 31m23.267297093s ago: executing program 33 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000580), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x0, 0x0, 0x1200) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{}, {0x0, 0x2}, {}, {}, {}, {0x4000}], 0x0, 0x0, 0x16, 0x1}}) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 30m3.004587521s ago: executing program 2 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000680)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000000c0)={0x10, 0x1}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ae8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30m0.066906972s ago: executing program 2 (id=125): r0 = socket(0xa, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 29m54.124611918s ago: executing program 2 (id=134): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r3, 0x5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) 29m51.988197963s ago: executing program 2 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000680)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ae8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29m49.684853668s ago: executing program 2 (id=138): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x800, 0x3, 0x8000135}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, 0x0, &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 29m46.427185375s ago: executing program 2 (id=140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000580), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x0, 0x0, 0x1200) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) keyctl$clear(0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 29m31.106514443s ago: executing program 34 (id=140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000580), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x0, 0x0, 0x1200) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) keyctl$clear(0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 20m31.85864538s ago: executing program 3 (id=550): shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r5}, 0x18) setreuid(0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000580)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 20m30.605384681s ago: executing program 3 (id=551): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) 20m26.23378222s ago: executing program 3 (id=554): r0 = socket(0xa, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 20m24.875867255s ago: executing program 3 (id=555): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50040000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x2) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000400)={0x5, &(0x7f0000000440)=[{0x5, 0xd0}, {0x3, 0x8fb3}, {0x5, 0xffff}, {0x480, 0x2}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x5}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xfffb, 0xa, 0x1ff, 0x2}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) 20m13.957447616s ago: executing program 3 (id=557): add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) 20m13.885994563s ago: executing program 3 (id=558): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x0) unshare(0x6a040000) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe7, 0xd7, 0x7f, 0x40, 0x12d6, 0x444, 0x293d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0x8b, 0xa, 0x2e}}]}}]}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) 19m57.926398626s ago: executing program 35 (id=558): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x0) unshare(0x6a040000) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe7, 0xd7, 0x7f, 0x40, 0x12d6, 0x444, 0x293d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0x8b, 0xa, 0x2e}}]}}]}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) 11m37.92145983s ago: executing program 8 (id=934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 11m33.976554452s ago: executing program 8 (id=937): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x3, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 11m29.1009386s ago: executing program 8 (id=940): r0 = socket(0xa, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200), 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 11m26.675487865s ago: executing program 8 (id=944): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$nbd(r0, 0x0, 0x40) 11m25.032638685s ago: executing program 8 (id=946): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x2) sendmsg(r1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 11m22.730882886s ago: executing program 8 (id=948): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(0xffffffffffffffff, 0x94, 0x40000000, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x1370, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 11m7.570360375s ago: executing program 36 (id=948): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(0xffffffffffffffff, 0x94, 0x40000000, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x1370, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 9m4.982150006s ago: executing program 0 (id=1084): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 8m55.273564315s ago: executing program 0 (id=1093): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m53.581406586s ago: executing program 0 (id=1095): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x2) sendmsg(r1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 8m48.408766979s ago: executing program 7 (id=1101): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$nbd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="5d6c548e6f4b7d2d81971a6eb181e6525c1a8ef51543459c7759c1583b21ec8317437d2464fcd6588f3db5da65d95c64c21d0ea59550beb8839f7186ec2144b2e7e4a984a99f4611c5fe0c037f42664f65ca34be397c02e27062928258b9480de68cad69240a82185c496b4199380cb66cf20e31b13b2980217196900133ff99e42afbf10650db27c970b8fcf7680c5228aeffaaff2f6ee6735b39dc326c6308fee3521a39b56b015e931ae14dbdc641adf681c9"], 0x40) 8m47.00517453s ago: executing program 7 (id=1102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 8m43.901325629s ago: executing program 0 (id=1105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) 8m42.666997536s ago: executing program 0 (id=1108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc00", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f00000022c0)="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", 0xd00}, {&(0x7f0000000480)="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", 0x121}, {&(0x7f00000005c0)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae73f60b7254d3278aa75b0a65755395ca9de7ecf950a347b85775287a2fae0c370b5829b030c08d2571c104a342e4d1050b0422de409d7cb8a94b330cc7d125cf20f442f12e5cfc948aa28", 0x6a}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e0ef540e84c344fc9ef33cc7a03b39d275822c8042bbac5b0553282a5931d458a28949a6540655dff4ccb62c28b165fe9fee71d10d88000ec0db22336ed6b6db60d2d766d0f736e", 0x8f}], 0x5, 0x0, 0x0, 0x4000014}], 0x1, 0x4c885) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/165, 0xa5}], 0x2}, 0x4}], 0x1, 0x400101c3, 0x0) 8m41.98142431s ago: executing program 0 (id=1110): userfaultfd(0x1) io_setup(0x8, &(0x7f0000004200)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 8m37.793231854s ago: executing program 7 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 8m35.416758159s ago: executing program 7 (id=1116): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) mknod$loop(0x0, 0x8fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4004743a, 0x0) 8m34.517867239s ago: executing program 7 (id=1117): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x7, 0x1) 8m33.080697772s ago: executing program 7 (id=1119): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x3, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 8m23.624078268s ago: executing program 37 (id=1110): userfaultfd(0x1) io_setup(0x8, &(0x7f0000004200)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 8m14.277769976s ago: executing program 38 (id=1119): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x3, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 3m42.566786093s ago: executing program 5 (id=1371): mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00000000000000", 0x8) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x25) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m37.991062985s ago: executing program 5 (id=1375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) writev(r5, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccaba1401d36d3d03d682ba47a8c2e0c5a5a5ed9131f73330e9e04295317ff97adac5549724581ef66f12aab8672659fb2b2b1f47546616b1e6f350a5bab3e49c7e52d6451f736cc13dbaa0792b73eda52278a769ee442ffd157512eae59b17dadfcb93af0a51fef7706dcd70f7d06e5409833e8cd578e5f73661abedacab46e02d12fbe7c3d9e54f068e26a20d338e6cc8316f6ad768c9c3d411dd535434386ccf1a972f547595740eac2b50108a4c2a264267ca6a64dd01a046829db5183c4d36dd8df2ad10f92dacfdebeca046a", 0xd0}], 0x1) close(r3) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) 3m35.153616399s ago: executing program 5 (id=1376): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28143, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_rr_get_interval(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000ba300000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x0) 3m33.447325671s ago: executing program 5 (id=1378): r0 = syz_io_uring_setup(0x1370, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m32.863691357s ago: executing program 5 (id=1379): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa951, 0x10, 0x0, 0x22e}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x17, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) 3m31.448843631s ago: executing program 5 (id=1380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m16.15523636s ago: executing program 39 (id=1380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.705660984s ago: executing program 6 (id=1506): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 7.572305316s ago: executing program 6 (id=1507): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x149a40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.482969803s ago: executing program 6 (id=1508): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x3, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000), 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 6.026659963s ago: executing program 6 (id=1509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) writev(r5, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccaba1401d36d3d03d682ba47a8c2e0c5a5a5ed9131f73330e9e04295317ff97adac5549724581ef66f12aab8672659fb2b2b1f47546616b1e6f350a5bab3e49c7e52d6451f736cc13dbaa0792b73eda52278a769ee442ffd157512eae59b17dadfcb93af0a51fef7706dcd70f7d06e5409833e8cd578e5f73661abedacab46e02d12fbe7c3d9e54f068e26a20d338e6cc8316f6ad768c9c3d411dd535434386ccf1a972f547595740eac2b50108a4c2a264267ca6a64dd01a046829db5183c4d36dd8df2ad10f92dacfdebeca046a", 0xd0}], 0x1) close(r3) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) 4.059835339s ago: executing program 6 (id=1510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=1511): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x3, 0x4, {0x0, @pix_mp={0x3ff, 0x2, 0x30314247, 0x6, 0xa, [{0x9, 0xff}, {0x10000, 0x1}, {0x9, 0x7}, {0x101}, {0x6, 0x8001}, {0x3, 0xe}, {0x5, 0xe}, {0x5, 0x4}], 0xe, 0xcc, 0x6, 0x1, 0x4}}}) kernel console output (not intermixed with test programs): 81 - 0 [ 1556.659821][T13392] Bluetooth: hci1: command tx timeout [ 1556.919748][T13392] Bluetooth: hci0: command tx timeout [ 1558.457005][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.570208][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1558.594719][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1558.632621][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1558.654392][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1558.655429][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1558.680373][T13392] Bluetooth: hci1: command tx timeout [ 1559.245269][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.778653][ T5849] Bluetooth: hci3: command tx timeout [ 1560.779170][ T5849] Bluetooth: hci1: command tx timeout [ 1562.083949][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.505688][T13392] Bluetooth: hci3: command tx timeout [ 1565.560019][T13392] Bluetooth: hci3: command tx timeout [ 1568.597175][T13392] Bluetooth: hci3: command tx timeout [ 1569.566969][T14692] chnl_net:caif_netlink_parms(): no params data found [ 1573.847040][ T67] bridge_slave_1: left allmulticast mode [ 1573.847077][ T67] bridge_slave_1: left promiscuous mode [ 1573.847362][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.945209][ T67] bridge_slave_0: left allmulticast mode [ 1573.945245][ T67] bridge_slave_0: left promiscuous mode [ 1573.945537][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.621409][T14816] block nbd6: shutting down sockets [ 1577.402687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.095600][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1155'. [ 1578.591704][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1578.655340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.772302][ T9] usb 7-1: device descriptor read/64, error -71 [ 1579.022679][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1579.192627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.205464][ T9] usb 7-1: device descriptor read/64, error -71 [ 1579.310140][ T9] usb usb7-port1: attempt power cycle [ 1579.649731][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1579.693246][ T9] usb 7-1: device descriptor read/8, error -71 [ 1579.941371][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1579.962312][ T9] usb 7-1: device descriptor read/8, error -71 [ 1580.042967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.098328][ T9] usb usb7-port1: unable to enumerate USB device [ 1580.191461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.540120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.641812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.456216][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.554912][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.592711][ T67] bond0 (unregistering): Released all slaves [ 1581.815912][T14708] chnl_net:caif_netlink_parms(): no params data found [ 1582.319587][ T9927] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1582.500201][ T9927] usb 7-1: Using ep0 maxpacket: 32 [ 1582.506114][ T9927] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1582.506147][ T9927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.542013][ T9927] usb 7-1: config 0 descriptor?? [ 1582.757039][ T9927] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1582.759445][ T9927] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1582.797017][ T9927] dib0700: firmware download failed at 7 with -22 [ 1582.818006][ T9927] usb 7-1: USB disconnect, device number 17 [ 1583.209017][T14692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.209119][T14692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.209329][T14692] bridge_slave_0: entered allmulticast mode [ 1583.215112][T14692] bridge_slave_0: entered promiscuous mode [ 1583.550550][T14692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.550650][T14692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.550817][T14692] bridge_slave_1: entered allmulticast mode [ 1583.552713][T14692] bridge_slave_1: entered promiscuous mode [ 1583.660478][T14850] PKCS7: Unknown OID: [5] (bad) [ 1583.660498][T14850] PKCS7: Only support pkcs7_signedData type [ 1584.639089][T14692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.759062][T14692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1585.259773][ T67] hsr_slave_0: left promiscuous mode [ 1585.300149][ T67] hsr_slave_1: left promiscuous mode [ 1585.301145][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.301176][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.360989][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.361024][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.717632][T14864] netlink: 'syz.6.1161': attribute type 1 has an invalid length. [ 1586.783046][ T67] veth1_macvtap: left promiscuous mode [ 1586.783176][ T67] veth0_macvtap: left promiscuous mode [ 1586.783488][ T67] veth1_vlan: left promiscuous mode [ 1586.783708][ T67] veth0_vlan: left promiscuous mode [ 1586.999732][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1587.160488][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1587.163331][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1587.166855][ T9] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1587.166886][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.166909][ T9] usb 6-1: Product: syz [ 1587.166924][ T9] usb 6-1: Manufacturer: syz [ 1587.166940][ T9] usb 6-1: SerialNumber: syz [ 1587.173679][ T9] usb 6-1: config 0 descriptor?? [ 1587.250355][ T9] usb 6-1: no audio or video endpoints found [ 1589.738727][ T9] usb 6-1: USB disconnect, device number 7 [ 1592.141755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.923307][ T67] team_slave_1 (unregistering): left promiscuous mode [ 1592.951560][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1593.055774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.137746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.331718][ T67] team_slave_0 (unregistering): left promiscuous mode [ 1593.357978][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1594.155493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.187069][T14889] PKCS7: Unknown OID: [5] (bad) [ 1594.187083][T14889] PKCS7: Only support pkcs7_signedData type [ 1595.255919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.623286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.822212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.029299][T14893] PKCS7: Unknown OID: [5] (bad) [ 1596.029319][T14893] PKCS7: Only support pkcs7_signedData type [ 1596.287654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.356680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.722823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.806544][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.806797][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.807071][T14708] bridge_slave_0: entered allmulticast mode [ 1597.850156][T14708] bridge_slave_0: entered promiscuous mode [ 1599.256874][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.257031][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.257252][T14708] bridge_slave_1: entered allmulticast mode [ 1599.280807][T14708] bridge_slave_1: entered promiscuous mode [ 1599.615781][T14692] team0: Port device team_slave_0 added [ 1599.752692][T14909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1172'. [ 1601.350912][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1601.377633][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1601.396943][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1601.431443][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1601.479214][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1602.737913][T14708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.744832][T14739] chnl_net:caif_netlink_parms(): no params data found [ 1602.812890][T14708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.012923][T14708] team0: Port device team_slave_0 added [ 1604.371516][T14708] team0: Port device team_slave_1 added [ 1604.675759][T14933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1604.997132][ T5849] Bluetooth: hci2: command tx timeout [ 1606.945260][T14708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.945282][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.945443][T14708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.089849][ T5849] Bluetooth: hci2: command tx timeout [ 1607.131476][T14708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.131490][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1607.131512][T14708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.788564][T14739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.788669][T14739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.788826][T14739] bridge_slave_0: entered allmulticast mode [ 1608.798516][T14739] bridge_slave_0: entered promiscuous mode [ 1608.929873][T14739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.930089][T14739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.932461][T14739] bridge_slave_1: entered allmulticast mode [ 1608.996078][T14739] bridge_slave_1: entered promiscuous mode [ 1609.159774][ T5849] Bluetooth: hci2: command tx timeout [ 1609.929951][T14739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.151114][T13392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1610.167681][T13392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1610.177049][T13392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1610.189258][T13392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1610.193779][T13392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1611.404873][ T5849] Bluetooth: hci2: command tx timeout [ 1611.837031][T14739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.279994][T13392] Bluetooth: hci0: command tx timeout [ 1612.691743][T14986] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1184'. [ 1613.488055][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.488143][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.216785][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.357696][T14739] team0: Port device team_slave_0 added [ 1614.369938][T13392] Bluetooth: hci0: command tx timeout [ 1614.440426][T14739] team0: Port device team_slave_1 added [ 1615.697632][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.789799][T14739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.789819][T14739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.789851][T14739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.008191][T14739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.008210][T14739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.008242][T14739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.432121][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.441460][T13392] Bluetooth: hci0: command tx timeout [ 1617.151733][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.514124][T14914] chnl_net:caif_netlink_parms(): no params data found [ 1618.519930][T13392] Bluetooth: hci0: command tx timeout [ 1619.309978][ T5927] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1619.459755][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 1619.462347][ T5927] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1619.462378][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.527846][ T5927] usb 7-1: config 0 descriptor?? [ 1619.785065][ T5927] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1619.787548][ T5927] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1619.787601][ T5927] dib0700: firmware download failed at 7 with -22 [ 1620.046563][ T5927] usb 7-1: USB disconnect, device number 18 [ 1620.190942][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1620.195681][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1620.198580][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1620.212316][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1620.223450][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1622.368813][ T5849] Bluetooth: hci1: command tx timeout [ 1624.677154][ T5849] Bluetooth: hci1: command tx timeout [ 1624.937750][T15059] PKCS7: Unknown OID: [5] (bad) [ 1624.937768][T15059] PKCS7: Only support pkcs7_signedData type [ 1624.950825][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.950992][T14914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.951309][T14914] bridge_slave_0: entered allmulticast mode [ 1624.954567][T14914] bridge_slave_0: entered promiscuous mode [ 1624.992298][T14914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.992474][T14914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.992869][T14914] bridge_slave_1: entered allmulticast mode [ 1625.006663][T14914] bridge_slave_1: entered promiscuous mode [ 1625.927201][ T67] bridge_slave_1: left allmulticast mode [ 1625.927229][ T67] bridge_slave_1: left promiscuous mode [ 1625.927557][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.028617][ T67] bridge_slave_0: left allmulticast mode [ 1626.028655][ T67] bridge_slave_0: left promiscuous mode [ 1626.028961][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.135564][ T67] bridge_slave_1: left allmulticast mode [ 1626.135590][ T67] bridge_slave_1: left promiscuous mode [ 1626.135789][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.232676][ T67] bridge_slave_0: left allmulticast mode [ 1626.232703][ T67] bridge_slave_0: left promiscuous mode [ 1626.232897][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.350571][ T67] bridge_slave_1: left allmulticast mode [ 1626.350608][ T67] bridge_slave_1: left promiscuous mode [ 1626.350875][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.446908][ T67] bridge_slave_0: left allmulticast mode [ 1626.446941][ T67] bridge_slave_0: left promiscuous mode [ 1626.447136][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.759835][ T5849] Bluetooth: hci1: command tx timeout [ 1627.134707][T15084] PKCS7: Unknown OID: [5] (bad) [ 1627.134726][T15084] PKCS7: Only support pkcs7_signedData type [ 1627.948077][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.386100][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1628.546598][ T67] bond0 (unregistering): Released all slaves [ 1628.840033][ T5849] Bluetooth: hci1: command tx timeout [ 1629.563610][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.738938][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.853277][ T67] bond0 (unregistering): Released all slaves [ 1636.011343][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.100785][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.128658][ T67] bond0 (unregistering): Released all slaves [ 1636.233044][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.513623][T15098] tipc: Started in network mode [ 1636.513663][T15098] tipc: Node identity d2a530513e46, cluster identity 4711 [ 1636.525377][T15098] tipc: Enabled bearer , priority 0 [ 1636.527803][T15099] syzkaller0: entered promiscuous mode [ 1636.527833][T15099] syzkaller0: entered allmulticast mode [ 1636.581179][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.981632][T15096] tipc: Resetting bearer [ 1638.473657][T15096] tipc: Disabling bearer [ 1638.585010][ T5904] tipc: Node number set to 3974312017 [ 1639.026489][T15148] PKCS7: Unknown OID: [5] (bad) [ 1639.026507][T15148] PKCS7: Only support pkcs7_signedData type [ 1639.162810][T14972] chnl_net:caif_netlink_parms(): no params data found [ 1640.269831][T14914] team0: Port device team_slave_0 added [ 1640.575127][T14914] team0: Port device team_slave_1 added [ 1641.939379][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.939399][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1641.939431][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.226372][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.226391][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.226432][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.656557][T15173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1642.699753][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.701521][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.701730][T14972] bridge_slave_0: entered allmulticast mode [ 1642.715254][T14972] bridge_slave_0: entered promiscuous mode [ 1642.911743][ T67] hsr_slave_0: left promiscuous mode [ 1642.950427][T15173] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1642.950682][T15173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1642.951976][T15173] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1642.966428][ T67] hsr_slave_1: left promiscuous mode [ 1642.967842][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.022891][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.254494][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.358864][T15173] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1643.978599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.061258][T15173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1644.061358][T15173] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1644.109973][T15173] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1644.149881][ T67] hsr_slave_0: left promiscuous mode [ 1644.191887][ T67] hsr_slave_1: left promiscuous mode [ 1644.193159][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1644.193201][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.199955][T15173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1644.200051][T15173] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1644.242628][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.242663][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.303229][T15173] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1644.578201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.681203][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 1644.709910][ T67] veth1_macvtap: left promiscuous mode [ 1644.710045][ T67] veth0_macvtap: left promiscuous mode [ 1644.714503][ T67] veth1_vlan: left promiscuous mode [ 1644.714734][ T67] veth0_vlan: left promiscuous mode [ 1645.089803][ T5849] Bluetooth: hci6: command 0x0c1a tx timeout [ 1645.089811][T13392] Bluetooth: hci2: command 0x0c1a tx timeout [ 1646.171908][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 1646.279912][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 1646.589664][T15182] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1646.764875][T15182] usb 7-1: Using ep0 maxpacket: 32 [ 1646.768805][T15182] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1646.768837][T15182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.798448][T15182] usb 7-1: config 0 descriptor?? [ 1646.853137][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1647.006931][T15182] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1647.022974][T15182] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1647.023029][T15182] dib0700: firmware download failed at 7 with -22 [ 1647.190025][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 1647.221250][ T5927] usb 7-1: USB disconnect, device number 19 [ 1648.199719][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 1648.360013][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 1649.239674][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 1650.185410][T15223] netlink: 'syz.6.1214': attribute type 1 has an invalid length. [ 1650.289975][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 1650.441331][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 1652.740411][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1653.070691][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1658.949952][ T5927] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1659.099658][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 1659.104078][ T5927] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1659.104113][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.168207][ T5927] usb 7-1: config 0 descriptor?? [ 1659.414024][ T5927] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1659.416011][ T5927] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1659.416056][ T5927] dib0700: firmware download failed at 7 with -22 [ 1659.649724][ T5927] usb 7-1: USB disconnect, device number 20 [ 1661.737202][T13392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1661.775486][T13392] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1661.780754][T13392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1661.812618][T13392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1661.822602][T13392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1663.892437][T13392] Bluetooth: hci3: command tx timeout [ 1666.953894][ T5849] Bluetooth: hci3: command tx timeout [ 1668.999655][T13392] Bluetooth: hci3: command tx timeout [ 1670.532995][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1670.537567][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1670.539615][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1670.555757][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1670.556728][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1671.079992][T13392] Bluetooth: hci3: command tx timeout [ 1671.500998][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1671.911980][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1672.680981][T13392] Bluetooth: hci5: command tx timeout [ 1674.461302][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.461387][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.759989][T13392] Bluetooth: hci5: command tx timeout [ 1676.839818][T13392] Bluetooth: hci5: command tx timeout [ 1678.919700][T13392] Bluetooth: hci5: command tx timeout [ 1680.112303][T15322] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1237'. [ 1681.665776][T15330] block nbd5: shutting down sockets [ 1682.527067][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1682.550009][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1682.551782][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1682.557297][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1682.581651][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1682.795865][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.796948][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.797200][T14972] bridge_slave_1: entered allmulticast mode [ 1682.836414][T14972] bridge_slave_1: entered promiscuous mode [ 1683.295205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1683.756532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1684.681503][ T5849] Bluetooth: hci7: command tx timeout [ 1686.088985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.396295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.571033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.003484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.005016][ T5849] Bluetooth: hci7: command tx timeout [ 1687.179799][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.825390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.079820][T13392] Bluetooth: hci7: command tx timeout [ 1689.687536][T15280] chnl_net:caif_netlink_parms(): no params data found [ 1689.811852][T15363] netlink: 'syz.5.1248': attribute type 1 has an invalid length. [ 1691.160137][T13392] Bluetooth: hci7: command tx timeout [ 1691.420547][T15265] chnl_net:caif_netlink_parms(): no params data found [ 1692.117992][T15335] chnl_net:caif_netlink_parms(): no params data found [ 1693.148360][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.162433][T15280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.162642][T15280] bridge_slave_0: entered allmulticast mode [ 1693.191095][T15280] bridge_slave_0: entered promiscuous mode [ 1693.369803][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.369930][T15280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.370102][T15280] bridge_slave_1: entered allmulticast mode [ 1693.417425][T15280] bridge_slave_1: entered promiscuous mode [ 1693.982844][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.986436][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.986651][T15265] bridge_slave_0: entered allmulticast mode [ 1694.028432][T15265] bridge_slave_0: entered promiscuous mode [ 1694.531596][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.531717][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.531924][T15265] bridge_slave_1: entered allmulticast mode [ 1694.534086][T15265] bridge_slave_1: entered promiscuous mode [ 1694.574582][T15280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.050614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.235824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.317545][T15280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.433623][T15335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.434546][T15335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.434814][T15335] bridge_slave_0: entered allmulticast mode [ 1695.468674][T15335] bridge_slave_0: entered promiscuous mode [ 1696.041373][T15335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.041475][T15335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.041673][T15335] bridge_slave_1: entered allmulticast mode [ 1696.043768][T15335] bridge_slave_1: entered promiscuous mode [ 1696.070642][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.328425][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.409398][T15280] team0: Port device team_slave_0 added [ 1696.739165][T15280] team0: Port device team_slave_1 added [ 1696.838568][T15335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.190965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.312416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.551710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.610233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.615276][ T67] bridge_slave_1: left allmulticast mode [ 1698.615319][ T67] bridge_slave_1: left promiscuous mode [ 1698.615605][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.727705][ T67] bridge_slave_0: left allmulticast mode [ 1698.727743][ T67] bridge_slave_0: left promiscuous mode [ 1698.728030][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.821870][ T67] bridge_slave_1: left allmulticast mode [ 1698.821908][ T67] bridge_slave_1: left promiscuous mode [ 1698.822182][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.901282][ T67] bridge_slave_0: left allmulticast mode [ 1698.901317][ T67] bridge_slave_0: left promiscuous mode [ 1698.901568][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.004880][ T67] bridge_slave_1: left allmulticast mode [ 1699.004917][ T67] bridge_slave_1: left promiscuous mode [ 1699.005193][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.317460][ T67] bridge_slave_0: left allmulticast mode [ 1699.317909][ T67] bridge_slave_0: left promiscuous mode [ 1699.372237][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.087237][ T67] bridge_slave_1: left allmulticast mode [ 1700.087332][ T67] bridge_slave_1: left promiscuous mode [ 1700.088252][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.321054][ T67] bridge_slave_0: left allmulticast mode [ 1700.321081][ T67] bridge_slave_0: left promiscuous mode [ 1700.321278][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.748411][ T67] bond0 (unregistering): Released all slaves [ 1701.455179][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.553181][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.622034][ T67] bond0 (unregistering): Released all slaves [ 1702.290429][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.469025][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.557799][ T67] bond0 (unregistering): Released all slaves [ 1703.711985][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.810779][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.862512][ T67] bond0 (unregistering): Released all slaves [ 1703.915184][T15335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.918474][T15265] team0: Port device team_slave_0 added [ 1704.076230][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1268'. [ 1704.123760][T15489] tipc: Enabled bearer , priority 10 [ 1704.248160][T15265] team0: Port device team_slave_1 added [ 1704.252198][T15280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.252217][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.253349][T15280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.720413][T15497] netlink: 'syz.5.1271': attribute type 1 has an invalid length. [ 1705.048685][T15280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.048718][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.048751][T15280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.055221][T15335] team0: Port device team_slave_0 added [ 1705.119651][ T5912] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1705.289659][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 1705.292098][ T5912] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1705.292132][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.296811][ T5912] usb 7-1: config 0 descriptor?? [ 1705.565784][T15335] team0: Port device team_slave_1 added [ 1705.575982][ T5912] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1705.626865][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.626882][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.626908][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.676590][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1705.705140][ T5912] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1705.705266][ T5912] usb 7-1: media controller created [ 1705.761924][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1705.864518][ T5912] DVB: Unable to find symbol dib7000p_attach() [ 1705.864600][ T5912] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1705.959732][ T5912] rc_core: IR keymap rc-dib0700-rc5 not found [ 1705.959755][ T5912] Registered IR keymap rc-empty [ 1705.963512][ T5912] dvb-usb: could not initialize remote control. [ 1705.963563][ T5912] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1706.095381][ T5912] usb 7-1: USB disconnect, device number 21 [ 1706.095662][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.095678][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.095709][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.271401][ T5912] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1706.524578][T15335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.524598][T15335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.524630][T15335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.771445][T15335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.771465][T15335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.771496][T15335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.833368][T15280] hsr_slave_0: entered promiscuous mode [ 1706.834868][T15280] hsr_slave_1: entered promiscuous mode [ 1706.836927][T15280] debugfs: 'hsr0' already exists in 'hsr' [ 1706.836956][T15280] Cannot create hsr debugfs directory [ 1708.015465][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.050995][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.163729][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.232461][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.302610][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.371189][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1711.292489][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1711.508542][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1713.202649][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1713.383738][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1714.290914][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1714.440472][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1715.078010][T15265] hsr_slave_0: entered promiscuous mode [ 1715.085752][T15265] hsr_slave_1: entered promiscuous mode [ 1715.088546][T15265] debugfs: 'hsr0' already exists in 'hsr' [ 1715.088574][T15265] Cannot create hsr debugfs directory [ 1715.122452][T15525] tipc: Started in network mode [ 1715.122485][T15525] tipc: Node identity 7f000001, cluster identity 4711 [ 1715.133740][T15525] tipc: Enabled bearer , priority 10 [ 1716.340919][T15126] tipc: Node number set to 2130706433 [ 1716.634606][T15559] netlink: 'syz.6.1283': attribute type 1 has an invalid length. [ 1717.997076][T15335] hsr_slave_0: entered promiscuous mode [ 1717.998836][T15335] hsr_slave_1: entered promiscuous mode [ 1718.002818][T15335] debugfs: 'hsr0' already exists in 'hsr' [ 1718.002851][T15335] Cannot create hsr debugfs directory [ 1722.605401][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1722.646981][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1722.673564][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1722.679638][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1722.680880][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1724.842225][ T5849] Bluetooth: hci0: command tx timeout [ 1727.094423][ T5849] Bluetooth: hci0: command tx timeout [ 1730.546002][T13392] Bluetooth: hci0: command tx timeout [ 1731.652268][T15617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1731.652524][T15617] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1731.652732][T15617] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1731.652820][T15617] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1731.945110][T15617] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1732.096362][T15617] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1732.096482][T15617] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1732.188407][T15617] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1732.188967][T15587] chnl_net:caif_netlink_parms(): no params data found [ 1732.274454][T15617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1732.274562][T15617] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1732.352142][T15617] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1732.632999][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1732.654773][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1732.657527][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1732.679035][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1732.690674][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1733.320886][T13392] Bluetooth: hci4: command 0x0c1a tx timeout [ 1733.483227][T15335] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1733.721873][T13392] Bluetooth: hci6: command 0x0c1a tx timeout [ 1733.885803][T15335] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1733.965013][ T67] bridge_slave_1: left allmulticast mode [ 1733.965050][ T67] bridge_slave_1: left promiscuous mode [ 1733.965327][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.052992][ T67] bridge_slave_0: left allmulticast mode [ 1734.053029][ T67] bridge_slave_0: left promiscuous mode [ 1734.053382][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.129868][T13392] Bluetooth: hci7: command 0x0c1a tx timeout [ 1734.280778][T13392] Bluetooth: hci0: command 0x0405 tx timeout [ 1734.770300][T13392] Bluetooth: hci1: command tx timeout [ 1734.858625][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.934723][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.998134][ T67] bond0 (unregistering): Released all slaves [ 1735.301562][T15335] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1735.599329][T15335] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1735.772111][T15587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.772260][T15587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.772523][T15587] bridge_slave_0: entered allmulticast mode [ 1735.801492][T15587] bridge_slave_0: entered promiscuous mode [ 1735.819518][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.819602][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.939669][ T67] hsr_slave_0: left promiscuous mode [ 1735.989666][ T67] hsr_slave_1: left promiscuous mode [ 1735.990835][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.046133][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.209672][T13392] Bluetooth: hci7: command 0x0c1a tx timeout [ 1736.359592][T13392] Bluetooth: hci0: command 0x0405 tx timeout [ 1736.839599][T13392] Bluetooth: hci1: command tx timeout [ 1737.494619][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1737.712166][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1737.835557][T15680] fuse: Bad value for 'fd' [ 1738.299915][T13392] Bluetooth: hci7: command 0x0c1a tx timeout [ 1738.439598][T13392] Bluetooth: hci0: command 0x0405 tx timeout [ 1738.781529][T15587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.781756][T15587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.782005][T15587] bridge_slave_1: entered allmulticast mode [ 1738.785346][T15587] bridge_slave_1: entered promiscuous mode [ 1738.919609][T13392] Bluetooth: hci1: command tx timeout [ 1739.245233][T15587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.312847][T15587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.675510][T15587] team0: Port device team_slave_0 added [ 1739.722174][T15587] team0: Port device team_slave_1 added [ 1740.404373][T15587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.404394][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.404426][T15587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.440644][T15587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.440690][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.440730][T15587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.540466][T13392] Bluetooth: hci0: command 0x0405 tx timeout [ 1741.018644][T13392] Bluetooth: hci1: command tx timeout [ 1742.097980][T15587] hsr_slave_0: entered promiscuous mode [ 1742.110937][T15587] hsr_slave_1: entered promiscuous mode [ 1742.117474][T15587] debugfs: 'hsr0' already exists in 'hsr' [ 1742.117504][T15587] Cannot create hsr debugfs directory [ 1742.214417][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1742.220929][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1742.241200][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1742.242680][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1742.247066][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1742.721900][T15707] block nbd6: shutting down sockets [ 1744.879744][T13392] Bluetooth: hci2: command tx timeout [ 1745.449368][T15723] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1312'. [ 1745.661856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1745.689129][T15619] chnl_net:caif_netlink_parms(): no params data found [ 1745.750886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.668987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.918176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.920564][ T5849] Bluetooth: hci2: command tx timeout [ 1747.143582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1747.962222][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.291675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1749.398695][ T5849] Bluetooth: hci2: command tx timeout [ 1751.325460][T15619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.325565][T15619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.325993][T15619] bridge_slave_0: entered allmulticast mode [ 1751.336801][T15619] bridge_slave_0: entered promiscuous mode [ 1751.399767][ T5849] Bluetooth: hci2: command tx timeout [ 1753.701589][T15619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.701825][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.702078][T15619] bridge_slave_1: entered allmulticast mode [ 1753.709919][T15619] bridge_slave_1: entered promiscuous mode [ 1756.374825][T15619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.471907][T15619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.461198][T15619] team0: Port device team_slave_0 added [ 1761.202035][T15619] team0: Port device team_slave_1 added [ 1762.958311][T15795] tipc: Enabling of bearer rejected, already enabled [ 1762.983347][T15619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1762.983364][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.983390][T15619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.041494][T15619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.041512][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.041544][T15619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.675822][T15702] chnl_net:caif_netlink_parms(): no params data found [ 1764.255741][T15619] hsr_slave_0: entered promiscuous mode [ 1764.265613][T15619] hsr_slave_1: entered promiscuous mode [ 1764.267910][T15619] debugfs: 'hsr0' already exists in 'hsr' [ 1764.267939][T15619] Cannot create hsr debugfs directory [ 1770.483422][T15702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.483572][T15702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.483834][T15702] bridge_slave_0: entered allmulticast mode [ 1770.518492][T15702] bridge_slave_0: entered promiscuous mode [ 1770.763884][T15587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1771.793560][T15702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.793661][T15702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.793857][T15702] bridge_slave_1: entered allmulticast mode [ 1771.826375][T15702] bridge_slave_1: entered promiscuous mode [ 1771.884732][T15587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1772.116351][T15587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1772.319684][T15587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1772.371982][T15702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.581218][T15702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.296854][T15702] team0: Port device team_slave_0 added [ 1773.367764][T15702] team0: Port device team_slave_1 added [ 1773.368472][ T67] bridge_slave_1: left allmulticast mode [ 1773.368504][ T67] bridge_slave_1: left promiscuous mode [ 1773.368770][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.466968][ T67] bridge_slave_0: left allmulticast mode [ 1773.466997][ T67] bridge_slave_0: left promiscuous mode [ 1773.467217][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.569611][ T67] bridge_slave_1: left allmulticast mode [ 1773.569649][ T67] bridge_slave_1: left promiscuous mode [ 1773.572498][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.655828][ T67] bridge_slave_0: left allmulticast mode [ 1773.655870][ T67] bridge_slave_0: left promiscuous mode [ 1773.656138][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.286039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1774.889720][T12077] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1774.970609][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.041833][T12077] usb 6-1: Using ep0 maxpacket: 32 [ 1775.047383][T12077] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1775.047406][T12077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.097693][T12077] usb 6-1: config 0 descriptor?? [ 1775.175133][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.279186][ T67] bond0 (unregistering): Released all slaves [ 1775.317905][T12077] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1775.367847][T12077] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1775.379979][T12077] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1775.380077][T12077] usb 6-1: media controller created [ 1775.437987][T12077] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1775.683967][T12077] DVB: Unable to find symbol dib7000p_attach() [ 1775.683986][T12077] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1775.959874][T12077] rc_core: IR keymap rc-dib0700-rc5 not found [ 1775.959898][T12077] Registered IR keymap rc-empty [ 1775.960215][T12077] dvb-usb: could not initialize remote control. [ 1775.960359][T12077] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1775.996499][T12077] usb 6-1: USB disconnect, device number 8 [ 1776.017967][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1776.062070][T12077] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1776.123589][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.484674][ T67] bond0 (unregistering): Released all slaves [ 1777.784825][T15869] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1343'. [ 1777.955652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.484043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.518064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.085687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.179714][T15702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.179733][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1781.179764][T15702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.195410][T15702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.195431][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1781.195468][T15702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.461387][ T67] hsr_slave_0: left promiscuous mode [ 1781.509566][ T67] hsr_slave_1: left promiscuous mode [ 1781.510664][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.658441][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.882775][T13392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1781.887233][T13392] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1781.888469][T13392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1781.912215][T13392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1781.913095][T13392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1781.958133][ T67] hsr_slave_0: left promiscuous mode [ 1782.039641][ T67] hsr_slave_1: left promiscuous mode [ 1782.040536][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1782.096639][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.058299][T13392] Bluetooth: hci3: command tx timeout [ 1784.100730][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1786.129169][ T5849] Bluetooth: hci3: command tx timeout [ 1787.900331][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1788.199954][ T5849] Bluetooth: hci3: command tx timeout [ 1790.291010][ T5849] Bluetooth: hci3: command tx timeout [ 1797.255412][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.255469][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.647406][T13392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1798.661929][T13392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1798.684323][T13392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1798.699723][T13392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1798.705348][T13392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1799.639600][ T993] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1799.789662][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 1799.812760][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.812795][ T993] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1799.812844][ T993] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1799.812879][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.865110][ T993] usb 6-1: config 0 descriptor?? [ 1799.899876][ T993] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1800.148705][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1800.342025][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1800.761491][ T5849] Bluetooth: hci0: command tx timeout [ 1802.496532][ T6202] usb 6-1: USB disconnect, device number 9 [ 1802.863901][ T5849] Bluetooth: hci0: command tx timeout [ 1804.920618][ T5849] Bluetooth: hci0: command tx timeout [ 1805.422553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1805.452830][T13392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1805.471879][T13392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1805.474838][T13392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1805.505620][T13392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1805.507126][T13392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1805.840782][T15949] netlink: 'syz.5.1358': attribute type 1 has an invalid length. [ 1806.551779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.999645][T13392] Bluetooth: hci0: command tx timeout [ 1807.048801][T15888] chnl_net:caif_netlink_parms(): no params data found [ 1807.346198][T15923] chnl_net:caif_netlink_parms(): no params data found [ 1807.559693][T13392] Bluetooth: hci2: command tx timeout [ 1808.776705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1808.930957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.642715][T13392] Bluetooth: hci2: command tx timeout [ 1809.696573][T15960] netlink: 'syz.6.1360': attribute type 1 has an invalid length. [ 1810.004095][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.004332][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.004546][T15888] bridge_slave_0: entered allmulticast mode [ 1810.053733][T15888] bridge_slave_0: entered promiscuous mode [ 1810.622481][T15888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.622657][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.622908][T15888] bridge_slave_1: entered allmulticast mode [ 1810.643887][T15888] bridge_slave_1: entered promiscuous mode [ 1811.033697][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1363'. [ 1811.719561][T13392] Bluetooth: hci2: command tx timeout [ 1811.781478][T15923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.781577][T15923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.781791][T15923] bridge_slave_0: entered allmulticast mode [ 1811.783867][T15923] bridge_slave_0: entered promiscuous mode [ 1811.827683][T15888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.833325][T15923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.833806][T15923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.835594][T15923] bridge_slave_1: entered allmulticast mode [ 1811.874576][T15923] bridge_slave_1: entered promiscuous mode [ 1811.911385][T15888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1813.404512][T15988] netlink: 'syz.6.1364': attribute type 1 has an invalid length. [ 1813.665655][T15923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.689931][T15888] team0: Port device team_slave_0 added [ 1813.693971][T15923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1813.699198][T15888] team0: Port device team_slave_1 added [ 1813.801522][T13392] Bluetooth: hci2: command tx timeout [ 1814.688833][T15923] team0: Port device team_slave_0 added [ 1814.695927][T15993] tipc: Enabling of bearer rejected, already enabled [ 1814.697462][T15888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.697478][T15888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.697510][T15888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.835196][T15888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.835323][T15888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.835356][T15888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.841679][T15923] team0: Port device team_slave_1 added [ 1815.396499][T15923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.396519][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.396551][T15923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.531449][T15951] chnl_net:caif_netlink_parms(): no params data found [ 1815.703780][T15923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.703801][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.703833][T15923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.399067][T15888] hsr_slave_0: entered promiscuous mode [ 1816.411953][T15888] hsr_slave_1: entered promiscuous mode [ 1816.414999][T15888] debugfs: 'hsr0' already exists in 'hsr' [ 1816.415029][T15888] Cannot create hsr debugfs directory [ 1817.311756][T15923] hsr_slave_0: entered promiscuous mode [ 1817.316568][T15923] hsr_slave_1: entered promiscuous mode [ 1817.332940][T15923] debugfs: 'hsr0' already exists in 'hsr' [ 1817.332971][T15923] Cannot create hsr debugfs directory [ 1818.229933][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.230094][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.231490][T15951] bridge_slave_0: entered allmulticast mode [ 1818.249022][T15951] bridge_slave_0: entered promiscuous mode [ 1818.334319][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.335078][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.335316][T15951] bridge_slave_1: entered allmulticast mode [ 1818.343781][T15951] bridge_slave_1: entered promiscuous mode [ 1818.348523][ T67] bridge_slave_1: left allmulticast mode [ 1818.348562][ T67] bridge_slave_1: left promiscuous mode [ 1818.348838][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.662487][ T67] bridge_slave_0: left allmulticast mode [ 1818.662524][ T67] bridge_slave_0: left promiscuous mode [ 1818.662791][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.615829][ T67] bridge_slave_1: left allmulticast mode [ 1819.615871][ T67] bridge_slave_1: left promiscuous mode [ 1819.616184][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.995923][ T67] bridge_slave_0: left allmulticast mode [ 1819.995961][ T67] bridge_slave_0: left promiscuous mode [ 1819.996257][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.087392][ T67] bridge_slave_1: left allmulticast mode [ 1821.087442][ T67] bridge_slave_1: left promiscuous mode [ 1821.087717][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.391799][ T67] bridge_slave_0: left allmulticast mode [ 1822.391837][ T67] bridge_slave_0: left promiscuous mode [ 1822.392119][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.304476][ T6202] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1823.449548][ T6202] usb 7-1: device descriptor read/64, error -71 [ 1823.539448][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.643022][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.714635][ T67] bond0 (unregistering): Released all slaves [ 1823.719692][ T6202] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1823.849602][ T6202] usb 7-1: device descriptor read/64, error -71 [ 1823.960184][ T6202] usb usb7-port1: attempt power cycle [ 1824.309650][ T6202] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1824.332358][ T6202] usb 7-1: device descriptor read/8, error -71 [ 1824.463779][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.561608][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.578137][ T6202] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1824.608318][ T6202] usb 7-1: device descriptor read/8, error -71 [ 1824.663242][ T67] bond0 (unregistering): Released all slaves [ 1824.709854][ T6202] usb usb7-port1: unable to enumerate USB device [ 1825.392026][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1825.526609][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1825.618575][ T67] bond0 (unregistering): Released all slaves [ 1826.688052][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1827.008798][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.249740][ T67] hsr_slave_0: left promiscuous mode [ 1829.289721][ T67] hsr_slave_1: left promiscuous mode [ 1829.290814][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1829.320658][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1829.384775][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1829.402747][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1829.559787][ T67] hsr_slave_0: left promiscuous mode [ 1829.609627][ T67] hsr_slave_1: left promiscuous mode [ 1829.611862][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1829.650446][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.232267][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1842.490469][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1843.782173][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1843.794524][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1843.796105][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1843.798137][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1843.799122][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1844.493452][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1845.061739][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1846.285347][ T5849] Bluetooth: hci1: command tx timeout [ 1847.388164][T13392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1847.434783][T13392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1847.438187][T13392] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1847.445710][T13392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1847.448967][T13392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1847.515477][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1847.641791][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1848.359782][T13392] Bluetooth: hci1: command tx timeout [ 1848.364324][T15951] team0: Port device team_slave_0 added [ 1848.613891][T16070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1380'. [ 1848.672755][T15951] team0: Port device team_slave_1 added [ 1849.290438][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.290457][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.290488][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.511987][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.512008][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.512039][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.570129][T13392] Bluetooth: hci5: command tx timeout [ 1850.439498][T13392] Bluetooth: hci1: command tx timeout [ 1850.702479][T16112] block nbd6: shutting down sockets [ 1851.226397][T15951] hsr_slave_0: entered promiscuous mode [ 1851.266385][T15951] hsr_slave_1: entered promiscuous mode [ 1851.267385][T15951] debugfs: 'hsr0' already exists in 'hsr' [ 1851.267412][T15951] Cannot create hsr debugfs directory [ 1851.482029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.639844][T13392] Bluetooth: hci5: command tx timeout [ 1851.832992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.914217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.963282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1852.088736][T15923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1852.157317][T15923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1852.228762][T15923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1852.287286][T15923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1852.520007][T13392] Bluetooth: hci1: command tx timeout [ 1852.561716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1853.720196][T13392] Bluetooth: hci5: command tx timeout [ 1853.795268][T16099] chnl_net:caif_netlink_parms(): no params data found [ 1853.832318][T16089] chnl_net:caif_netlink_parms(): no params data found [ 1855.799621][T13392] Bluetooth: hci5: command tx timeout [ 1856.120621][T16137] netlink: 'syz.6.1392': attribute type 1 has an invalid length. [ 1856.676765][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.677216][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.677423][T16099] bridge_slave_0: entered allmulticast mode [ 1856.680601][T16099] bridge_slave_0: entered promiscuous mode [ 1856.719258][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.728103][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.728359][T16089] bridge_slave_0: entered allmulticast mode [ 1856.743812][T16089] bridge_slave_0: entered promiscuous mode [ 1857.054227][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.175843][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.175973][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.176176][T16099] bridge_slave_1: entered allmulticast mode [ 1857.178174][T16099] bridge_slave_1: entered promiscuous mode [ 1857.205915][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.206067][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.206344][T16089] bridge_slave_1: entered allmulticast mode [ 1857.209275][T16089] bridge_slave_1: entered promiscuous mode [ 1858.021454][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1858.047175][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1858.057607][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1858.068034][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1858.069139][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1858.175249][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.228195][T16151] tipc: Enabling of bearer rejected, already enabled [ 1858.237274][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1858.458633][T16089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1858.508093][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1858.676301][T16089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1858.689119][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.689211][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.887394][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.869182][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.923185][T16099] team0: Port device team_slave_0 added [ 1860.092221][T16089] team0: Port device team_slave_0 added [ 1860.097017][T16099] team0: Port device team_slave_1 added [ 1860.103684][T16089] team0: Port device team_slave_1 added [ 1860.199594][ T5849] Bluetooth: hci0: command tx timeout [ 1860.446651][T15951] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1860.875379][T15951] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1861.132075][T16089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.132095][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.132140][T16089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.133663][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.133678][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.133709][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.138449][T15951] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1862.178232][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.178251][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.178284][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.349176][ T5849] Bluetooth: hci0: command tx timeout [ 1862.370424][T16089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.370444][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.370476][T16089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.611512][T16171] block nbd6: shutting down sockets [ 1863.633482][T16089] hsr_slave_0: entered promiscuous mode [ 1863.634881][T16089] hsr_slave_1: entered promiscuous mode [ 1863.635837][T16089] debugfs: 'hsr0' already exists in 'hsr' [ 1863.635863][T16089] Cannot create hsr debugfs directory [ 1863.772236][T16099] hsr_slave_0: entered promiscuous mode [ 1863.780623][T16099] hsr_slave_1: entered promiscuous mode [ 1863.781699][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 1863.781730][T16099] Cannot create hsr debugfs directory [ 1863.967960][ T67] bridge_slave_1: left allmulticast mode [ 1863.967998][ T67] bridge_slave_1: left promiscuous mode [ 1863.968276][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.063968][ T67] bridge_slave_0: left allmulticast mode [ 1864.065148][ T67] bridge_slave_0: left promiscuous mode [ 1864.065461][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.147648][ T67] bridge_slave_1: left allmulticast mode [ 1864.147684][ T67] bridge_slave_1: left promiscuous mode [ 1864.147995][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.184404][T13392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1864.186942][T13392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1864.187992][T13392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1864.189944][T13392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1864.192617][T13392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1864.294866][ T67] bridge_slave_0: left allmulticast mode [ 1864.294903][ T67] bridge_slave_0: left promiscuous mode [ 1864.295198][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.364395][T13392] Bluetooth: hci0: command tx timeout [ 1865.200167][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.313063][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.591001][ T67] bond0 (unregistering): Released all slaves [ 1866.279954][T13392] Bluetooth: hci2: command tx timeout [ 1866.439917][T13392] Bluetooth: hci0: command tx timeout [ 1866.586039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.073051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.222817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.369964][T13392] Bluetooth: hci2: command tx timeout [ 1868.705783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.852160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.189688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.316394][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.411285][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.490818][ T67] bond0 (unregistering): Released all slaves [ 1870.248541][ T67] tipc: Disabling bearer [ 1870.249166][ T67] tipc: Left network mode [ 1870.475125][T13392] Bluetooth: hci2: command tx timeout [ 1873.045787][T13392] Bluetooth: hci2: command tx timeout [ 1875.109602][ T67] hsr_slave_0: left promiscuous mode [ 1875.149714][ T67] hsr_slave_1: left promiscuous mode [ 1875.150696][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.174793][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.349588][ T67] hsr_slave_0: left promiscuous mode [ 1875.376613][ T67] hsr_slave_1: left promiscuous mode [ 1875.377322][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1875.377344][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.410961][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1875.410996][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.524789][ T67] veth1_macvtap: left promiscuous mode [ 1875.524925][ T67] veth0_macvtap: left promiscuous mode [ 1875.525249][ T67] veth1_vlan: left promiscuous mode [ 1875.525471][ T67] veth0_vlan: left promiscuous mode [ 1877.077105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.498154][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1877.790559][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1877.896635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.971335][ C0] vkms_vblank_simulate: vblank timer overrun [ 1878.062868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.525119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.904678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.025317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.404848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.494068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1882.490467][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1882.730588][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1885.695621][T16154] chnl_net:caif_netlink_parms(): no params data found [ 1889.344956][T16154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.345060][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.345236][T16154] bridge_slave_0: entered allmulticast mode [ 1889.359899][T16154] bridge_slave_0: entered promiscuous mode [ 1889.605175][T16154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.605323][T16154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.605595][T16154] bridge_slave_1: entered allmulticast mode [ 1889.622589][T16154] bridge_slave_1: entered promiscuous mode [ 1890.390546][T16154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1890.504247][T16154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1890.505238][T16174] chnl_net:caif_netlink_parms(): no params data found [ 1890.986402][T16235] netlink: 'syz.6.1411': attribute type 1 has an invalid length. [ 1891.111528][T16154] team0: Port device team_slave_0 added [ 1891.276905][T16154] team0: Port device team_slave_1 added [ 1891.937965][T16154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1891.937980][T16154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.938002][T16154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.109814][T16154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.109834][T16154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.109867][T16154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.449047][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.449280][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.487169][T16174] bridge_slave_0: entered allmulticast mode [ 1892.499776][T16174] bridge_slave_0: entered promiscuous mode [ 1892.521193][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.521390][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.521657][T16174] bridge_slave_1: entered allmulticast mode [ 1892.526026][T16174] bridge_slave_1: entered promiscuous mode [ 1893.551086][T16154] hsr_slave_0: entered promiscuous mode [ 1893.583018][T16154] hsr_slave_1: entered promiscuous mode [ 1893.694087][T16174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.746109][T16174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.782269][T16174] team0: Port device team_slave_0 added [ 1897.139277][T16174] team0: Port device team_slave_1 added [ 1898.517748][T16174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.517768][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.517799][T16174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.031120][T16099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1899.121545][T16174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.121564][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.121597][T16174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.231077][T16099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1899.298696][T16099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1899.503387][T16099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1901.801362][T16174] hsr_slave_0: entered promiscuous mode [ 1901.811024][T16174] hsr_slave_1: entered promiscuous mode [ 1901.838396][T16174] debugfs: 'hsr0' already exists in 'hsr' [ 1901.850608][T16174] Cannot create hsr debugfs directory [ 1904.826797][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1904.863096][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1904.864376][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1904.866279][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1904.867153][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1906.029767][ T6202] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1906.159814][ T6202] usb 7-1: device descriptor read/64, error -71 [ 1906.419818][ T6202] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1906.553114][ T6202] usb 7-1: device descriptor read/64, error -71 [ 1906.668999][ T6202] usb usb7-port1: attempt power cycle [ 1906.671452][ T67] bridge_slave_1: left allmulticast mode [ 1906.671492][ T67] bridge_slave_1: left promiscuous mode [ 1906.671811][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.830932][ T67] bridge_slave_0: left allmulticast mode [ 1906.830969][ T67] bridge_slave_0: left promiscuous mode [ 1906.831299][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.966486][ T67] bridge_slave_1: left allmulticast mode [ 1906.966512][ T67] bridge_slave_1: left promiscuous mode [ 1906.966696][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.999513][T13392] Bluetooth: hci1: command tx timeout [ 1907.049570][ T6202] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1907.102981][ T67] bridge_slave_0: left allmulticast mode [ 1907.103016][ T67] bridge_slave_0: left promiscuous mode [ 1907.103279][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.103856][ T6202] usb 7-1: device descriptor read/8, error -71 [ 1907.339515][ T6202] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1907.367273][ T6202] usb 7-1: device descriptor read/8, error -71 [ 1907.479808][ T6202] usb usb7-port1: unable to enumerate USB device [ 1908.085072][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1908.102419][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1908.108283][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1908.109820][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1908.135055][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1908.200529][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1908.350290][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1908.438878][ T67] bond0 (unregistering): Released all slaves [ 1909.080305][T13392] Bluetooth: hci1: command tx timeout [ 1910.928826][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1910.938234][T13392] Bluetooth: hci3: command tx timeout [ 1911.159822][T13392] Bluetooth: hci1: command tx timeout [ 1911.510251][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.753649][ T67] bond0 (unregistering): Released all slaves [ 1913.024996][T13392] Bluetooth: hci3: command tx timeout [ 1913.259389][T13392] Bluetooth: hci1: command tx timeout [ 1914.440848][T16436] block nbd6: shutting down sockets [ 1914.530559][ T67] hsr_slave_0: left promiscuous mode [ 1914.549733][ T67] hsr_slave_1: left promiscuous mode [ 1914.550438][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.620671][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.891630][ T67] hsr_slave_0: left promiscuous mode [ 1914.960129][ T67] hsr_slave_1: left promiscuous mode [ 1914.960842][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1915.030141][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1915.240979][T13392] Bluetooth: hci3: command tx timeout [ 1915.782614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.029728][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.468809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.270870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.319573][T13392] Bluetooth: hci3: command tx timeout [ 1917.413232][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.466583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.729303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.846652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.974074][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1918.360623][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1919.978654][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1920.000947][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1920.006960][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1920.009048][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1920.027969][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1920.126978][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.127061][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.314334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.670561][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1920.823118][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1922.120531][T13392] Bluetooth: hci4: command tx timeout [ 1922.245388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.562373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.706850][T16367] chnl_net:caif_netlink_parms(): no params data found [ 1922.728956][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.225217][T13392] Bluetooth: hci4: command tx timeout [ 1924.903339][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.903490][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.903762][T16367] bridge_slave_0: entered allmulticast mode [ 1924.906672][T16367] bridge_slave_0: entered promiscuous mode [ 1925.124048][T16367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.124201][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.124428][T16367] bridge_slave_1: entered allmulticast mode [ 1925.139257][T16367] bridge_slave_1: entered promiscuous mode [ 1925.765087][T16489] chnl_net:caif_netlink_parms(): no params data found [ 1925.828473][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1925.912194][T16399] chnl_net:caif_netlink_parms(): no params data found [ 1926.094426][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1926.294107][T13392] Bluetooth: hci4: command tx timeout [ 1926.414205][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1926.434350][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1926.440588][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1926.463865][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1926.464776][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1928.359709][T13392] Bluetooth: hci4: command tx timeout [ 1928.599629][T13392] Bluetooth: hci5: command tx timeout [ 1929.456690][T16367] team0: Port device team_slave_0 added [ 1929.527940][T16367] team0: Port device team_slave_1 added [ 1930.541169][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.541189][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.541220][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.544019][T16489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.544174][T16489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.544419][T16489] bridge_slave_0: entered allmulticast mode [ 1930.558929][T16489] bridge_slave_0: entered promiscuous mode [ 1930.679505][T13392] Bluetooth: hci5: command tx timeout [ 1931.044655][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.044677][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1931.044709][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.074519][T16489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.074695][T16489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.075019][T16489] bridge_slave_1: entered allmulticast mode [ 1931.095411][T16489] bridge_slave_1: entered promiscuous mode [ 1931.246332][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 1931.393323][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.393473][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.393740][T16399] bridge_slave_0: entered allmulticast mode [ 1931.399730][T16399] bridge_slave_0: entered promiscuous mode [ 1931.871186][T16399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.877148][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.877359][T16399] bridge_slave_1: entered allmulticast mode [ 1931.887424][T16399] bridge_slave_1: entered promiscuous mode [ 1932.762573][T13392] Bluetooth: hci5: command tx timeout [ 1933.016892][T16489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1933.553960][T16489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1933.608511][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.028123][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.048106][T16367] hsr_slave_0: entered promiscuous mode [ 1934.071973][T16367] hsr_slave_1: entered promiscuous mode [ 1934.088725][T16367] debugfs: 'hsr0' already exists in 'hsr' [ 1934.088756][T16367] Cannot create hsr debugfs directory [ 1934.411643][T16489] team0: Port device team_slave_0 added [ 1934.732306][T16489] team0: Port device team_slave_1 added [ 1934.839721][T13392] Bluetooth: hci5: command tx timeout [ 1935.087476][T16399] team0: Port device team_slave_0 added [ 1937.311947][T16399] team0: Port device team_slave_1 added [ 1938.318575][T16489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.318595][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.318626][T16489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.623901][T16489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.623915][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.623937][T16489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.731253][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.731272][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.731304][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.889994][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.890010][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.890032][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1939.610207][T16489] hsr_slave_0: entered promiscuous mode [ 1939.613912][T16489] hsr_slave_1: entered promiscuous mode [ 1939.616625][T16489] debugfs: 'hsr0' already exists in 'hsr' [ 1939.616654][T16489] Cannot create hsr debugfs directory [ 1939.908451][T16399] hsr_slave_0: entered promiscuous mode [ 1939.916602][T16399] hsr_slave_1: entered promiscuous mode [ 1939.917780][T16399] debugfs: 'hsr0' already exists in 'hsr' [ 1939.917808][T16399] Cannot create hsr debugfs directory [ 1942.836733][T16531] chnl_net:caif_netlink_parms(): no params data found [ 1943.646232][T16653] block nbd6: shutting down sockets [ 1944.804242][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.995854][T16661] syzkaller0: entered promiscuous mode [ 1944.995885][T16661] syzkaller0: entered allmulticast mode [ 1945.701121][T16531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.701224][T16531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.701662][T16531] bridge_slave_0: entered allmulticast mode [ 1945.703694][T16531] bridge_slave_0: entered promiscuous mode [ 1945.740941][ T1906] kworker/1:2 (1906) used greatest stack depth: 14904 bytes left [ 1945.838429][T16531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.838598][T16531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.838888][T16531] bridge_slave_1: entered allmulticast mode [ 1945.842331][T16531] bridge_slave_1: entered promiscuous mode [ 1946.336947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1946.406613][T16531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1946.463152][T16531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1946.795984][T16531] team0: Port device team_slave_0 added [ 1946.825396][T16531] team0: Port device team_slave_1 added [ 1946.834191][T16367] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1947.385635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1948.326678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1948.666921][T16367] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1948.946489][T16367] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1948.971584][T16531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1948.971598][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1948.971620][T16531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.093411][T16367] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1949.141139][T16531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.141154][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.141177][T16531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.142084][ T67] bridge_slave_1: left allmulticast mode [ 1949.142108][ T67] bridge_slave_1: left promiscuous mode [ 1949.142295][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.237001][ T67] bridge_slave_0: left allmulticast mode [ 1949.237027][ T67] bridge_slave_0: left promiscuous mode [ 1949.237265][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.294931][ T67] bridge_slave_1: left allmulticast mode [ 1949.294969][ T67] bridge_slave_1: left promiscuous mode [ 1949.295240][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.392841][ T67] bridge_slave_0: left allmulticast mode [ 1949.392878][ T67] bridge_slave_0: left promiscuous mode [ 1949.393182][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.558474][ T67] bridge_slave_1: left allmulticast mode [ 1949.558512][ T67] bridge_slave_1: left promiscuous mode [ 1949.558780][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.691468][ T67] bridge_slave_0: left allmulticast mode [ 1949.691506][ T67] bridge_slave_0: left promiscuous mode [ 1949.691822][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.333691][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.560406][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.921001][ T67] bond0 (unregistering): Released all slaves [ 1955.591702][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1955.700624][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1955.766675][ T67] bond0 (unregistering): Released all slaves [ 1956.120485][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.204544][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.271251][ T67] bond0 (unregistering): Released all slaves [ 1957.067800][T16531] hsr_slave_0: entered promiscuous mode [ 1957.068974][T16531] hsr_slave_1: entered promiscuous mode [ 1957.099760][T16531] debugfs: 'hsr0' already exists in 'hsr' [ 1957.099791][T16531] Cannot create hsr debugfs directory [ 1957.859975][ T67] hsr_slave_0: left promiscuous mode [ 1957.900094][ T67] hsr_slave_1: left promiscuous mode [ 1957.901117][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1957.950775][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1958.158481][ T67] hsr_slave_0: left promiscuous mode [ 1958.179663][ T67] hsr_slave_1: left promiscuous mode [ 1958.180401][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1958.242941][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.184910][ T67] hsr_slave_0: left promiscuous mode [ 1960.239824][ T67] hsr_slave_1: left promiscuous mode [ 1960.240813][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.292578][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1961.480629][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1962.710377][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1966.266597][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1966.307066][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1966.328700][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1966.338652][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1966.347730][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1966.348650][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1967.560558][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1967.823423][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1967.846382][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1967.848217][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1967.864619][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1967.866723][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1969.000482][ T5849] Bluetooth: hci0: command tx timeout [ 1969.963647][ T5849] Bluetooth: hci2: command tx timeout [ 1971.079754][ T5849] Bluetooth: hci0: command tx timeout [ 1972.010473][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1972.247587][ T5849] Bluetooth: hci2: command tx timeout [ 1973.041267][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1973.172516][ T5849] Bluetooth: hci0: command tx timeout [ 1974.374606][ T5849] Bluetooth: hci2: command tx timeout [ 1975.721822][ T5849] Bluetooth: hci0: command tx timeout [ 1977.488053][ T5849] Bluetooth: hci2: command tx timeout [ 1980.906757][T16749] chnl_net:caif_netlink_parms(): no params data found [ 1981.140682][T13392] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1981.190464][T13392] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1981.195415][T13392] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1981.204774][T13392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1981.222960][T13392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1981.568128][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.568212][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.679060][T16741] chnl_net:caif_netlink_parms(): no params data found [ 1983.571628][T13392] Bluetooth: hci1: command tx timeout [ 1983.629967][T16749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.630207][T16749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.630444][T16749] bridge_slave_0: entered allmulticast mode [ 1983.633408][T16749] bridge_slave_0: entered promiscuous mode [ 1984.631971][T16749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.632144][T16749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.632389][T16749] bridge_slave_1: entered allmulticast mode [ 1984.635315][T16749] bridge_slave_1: entered promiscuous mode [ 1985.596157][T16741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.596309][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.596535][T16741] bridge_slave_0: entered allmulticast mode [ 1985.606449][T16741] bridge_slave_0: entered promiscuous mode [ 1985.647999][T16749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1985.648201][T13392] Bluetooth: hci1: command tx timeout [ 1985.799126][T16741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.806827][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.807115][T16741] bridge_slave_1: entered allmulticast mode [ 1985.823249][T16741] bridge_slave_1: entered promiscuous mode [ 1985.833893][T16749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.632449][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1986.707997][T16749] team0: Port device team_slave_0 added [ 1986.745068][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.882179][T16749] team0: Port device team_slave_1 added [ 1987.447781][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1987.470791][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1987.472123][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1987.481462][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1987.482668][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1987.719525][ T5849] Bluetooth: hci1: command tx timeout [ 1987.979224][T16741] team0: Port device team_slave_0 added [ 1988.113240][T16749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1988.113261][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1988.113293][T16749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1988.512195][T16741] team0: Port device team_slave_1 added [ 1988.520351][T16749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1988.520373][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1988.520411][T16749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1989.046307][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1989.046327][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.046358][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1989.432357][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1989.432374][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.432397][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1989.809558][ T5849] Bluetooth: hci1: command tx timeout [ 1989.879660][ T5849] Bluetooth: hci3: command tx timeout [ 1990.277181][T16749] hsr_slave_0: entered promiscuous mode [ 1990.278189][T16749] hsr_slave_1: entered promiscuous mode [ 1990.840539][T16741] hsr_slave_0: entered promiscuous mode [ 1990.856100][T16741] hsr_slave_1: entered promiscuous mode [ 1990.857138][T16741] debugfs: 'hsr0' already exists in 'hsr' [ 1990.871587][T16741] Cannot create hsr debugfs directory [ 1991.054601][T16799] chnl_net:caif_netlink_parms(): no params data found [ 1991.959596][ T5849] Bluetooth: hci3: command tx timeout [ 1993.855832][T16799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.856170][T16799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.856393][T16799] bridge_slave_0: entered allmulticast mode [ 1993.860514][T16799] bridge_slave_0: entered promiscuous mode [ 1993.965769][T16799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.965931][T16799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.966149][T16799] bridge_slave_1: entered allmulticast mode [ 1993.971374][T16799] bridge_slave_1: entered promiscuous mode [ 1994.039805][ T5849] Bluetooth: hci3: command tx timeout [ 1995.663745][T16799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1996.135908][ T5849] Bluetooth: hci3: command tx timeout [ 1997.103605][T16799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1997.873513][T16799] team0: Port device team_slave_0 added [ 1998.140274][T16825] chnl_net:caif_netlink_parms(): no params data found [ 1998.158468][T16799] team0: Port device team_slave_1 added [ 2001.306523][T16799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.306544][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.306576][T16799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2001.308864][T16749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2001.394587][T16799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.394601][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.394624][T16799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.395473][T16749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2001.586603][T16749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2001.643589][T16749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2002.558089][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2002.558244][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.558548][T16825] bridge_slave_0: entered allmulticast mode [ 2002.592292][T16825] bridge_slave_0: entered promiscuous mode [ 2002.618230][T16799] hsr_slave_0: entered promiscuous mode [ 2002.651900][T16799] hsr_slave_1: entered promiscuous mode [ 2002.652954][T16799] debugfs: 'hsr0' already exists in 'hsr' [ 2002.652990][T16799] Cannot create hsr debugfs directory [ 2002.840031][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.840181][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.844750][T16825] bridge_slave_1: entered allmulticast mode [ 2002.877220][T16825] bridge_slave_1: entered promiscuous mode [ 2003.227909][T16825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2003.294772][T16825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2003.748601][T16825] team0: Port device team_slave_0 added [ 2003.768299][ T67] bridge_slave_1: left allmulticast mode [ 2003.768337][ T67] bridge_slave_1: left promiscuous mode [ 2003.768622][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.842637][ T67] bridge_slave_0: left allmulticast mode [ 2003.842674][ T67] bridge_slave_0: left promiscuous mode [ 2003.842965][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.489072][ T67] bridge_slave_1: left allmulticast mode [ 2004.498401][ T67] bridge_slave_1: left promiscuous mode [ 2004.502031][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.842684][ T67] bridge_slave_0: left allmulticast mode [ 2004.842721][ T67] bridge_slave_0: left promiscuous mode [ 2004.842990][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.944530][ T67] bridge_slave_1: left allmulticast mode [ 2004.944569][ T67] bridge_slave_1: left promiscuous mode [ 2004.944840][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.261593][ T67] bridge_slave_0: left allmulticast mode [ 2005.261631][ T67] bridge_slave_0: left promiscuous mode [ 2005.261913][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.468266][ T67] bridge_slave_1: left allmulticast mode [ 2006.468304][ T67] bridge_slave_1: left promiscuous mode [ 2006.468584][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.622911][ T67] bridge_slave_0: left allmulticast mode [ 2006.622948][ T67] bridge_slave_0: left promiscuous mode [ 2006.623212][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.412279][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2008.500441][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2008.575174][ T67] bond0 (unregistering): Released all slaves [ 2009.240615][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2009.320387][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2009.389661][ T67] bond0 (unregistering): Released all slaves [ 2009.917400][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2009.990878][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.058088][ T67] bond0 (unregistering): Released all slaves [ 2010.411203][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2010.491677][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.554602][ T67] bond0 (unregistering): Released all slaves [ 2010.664192][T16825] team0: Port device team_slave_1 added [ 2011.398761][T16825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.398782][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.398815][T16825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.547732][T16825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.547751][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.547782][T16825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.149769][ T67] hsr_slave_0: left promiscuous mode [ 2012.169704][ T67] hsr_slave_1: left promiscuous mode [ 2012.171428][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.222725][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2012.362471][ T67] hsr_slave_0: left promiscuous mode [ 2012.379558][ T67] hsr_slave_1: left promiscuous mode [ 2012.382011][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.432232][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2012.570504][ T67] hsr_slave_0: left promiscuous mode [ 2012.589805][ T67] hsr_slave_1: left promiscuous mode [ 2012.590865][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.640915][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2012.779762][ T67] hsr_slave_0: left promiscuous mode [ 2012.801403][ T67] hsr_slave_1: left promiscuous mode [ 2012.803750][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.842178][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2014.590226][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2014.710434][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2015.920506][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2016.065102][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2017.362169][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2017.540522][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2018.870729][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2019.000669][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2019.758563][T16825] hsr_slave_0: entered promiscuous mode [ 2019.766440][T16825] hsr_slave_1: entered promiscuous mode [ 2019.767462][T16825] debugfs: 'hsr0' already exists in 'hsr' [ 2019.767489][T16825] Cannot create hsr debugfs directory [ 2022.983091][T16749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2023.139242][T16749] 8021q: adding VLAN 0 to HW filter on device team0 [ 2023.301588][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.301842][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2023.334287][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.334548][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2024.095419][T16943] netlink: 'syz.6.1498': attribute type 1 has an invalid length. [ 2024.527649][T16741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2024.800939][T16741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2025.067156][T16741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2025.462635][T16799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2025.600854][T16799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2025.702174][T16799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2025.956395][T16799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2026.072644][T16749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2026.742386][T13392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2026.748527][T13392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2026.766105][T13392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2026.777426][T13392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2026.787316][T13392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2026.973324][T16825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2027.067571][T16825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2027.196505][T16825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2027.329641][T16825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2028.814029][T13392] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2028.834724][T13392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2028.840815][T13392] Bluetooth: hci0: command tx timeout [ 2028.855164][T16977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2028.868962][T16977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2028.878397][T16977] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2030.619095][T16987] block nbd6: shutting down sockets [ 2030.630787][T16957] chnl_net:caif_netlink_parms(): no params data found [ 2030.867956][T16799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2030.919944][ T5849] Bluetooth: hci0: command tx timeout [ 2030.999796][ T5849] Bluetooth: hci4: command tx timeout [ 2031.893222][T16957] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.893320][T16957] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.893725][T16957] bridge_slave_0: entered allmulticast mode [ 2031.898815][T16957] bridge_slave_0: entered promiscuous mode [ 2031.990710][T16825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2031.992171][T16957] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.992398][T16957] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.992638][T16957] bridge_slave_1: entered allmulticast mode [ 2031.995557][T16957] bridge_slave_1: entered promiscuous mode [ 2032.042046][T16799] 8021q: adding VLAN 0 to HW filter on device team0 [ 2032.338144][ C0] vkms_vblank_simulate: vblank timer overrun [ 2032.522868][ C0] vkms_vblank_simulate: vblank timer overrun [ 2033.009656][ T5849] Bluetooth: hci0: command tx timeout [ 2033.024724][ C0] vkms_vblank_simulate: vblank timer overrun [ 2033.380278][ T5849] Bluetooth: hci4: command tx timeout [ 2033.525062][ T67] bridge_slave_1: left allmulticast mode [ 2033.525098][ T67] bridge_slave_1: left promiscuous mode [ 2033.525427][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.831138][ C0] vkms_vblank_simulate: vblank timer overrun [ 2033.881423][ T67] bridge_slave_0: left allmulticast mode [ 2033.881461][ T67] bridge_slave_0: left promiscuous mode [ 2033.881777][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.459748][ C0] vkms_vblank_simulate: vblank timer overrun [ 2034.750116][ C0] vkms_vblank_simulate: vblank timer overrun [ 2034.795053][ T67] bridge_slave_1: left allmulticast mode [ 2034.795092][ T67] bridge_slave_1: left promiscuous mode [ 2034.795363][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.911544][ T67] bridge_slave_0: left allmulticast mode [ 2034.911580][ T67] bridge_slave_0: left promiscuous mode [ 2034.911902][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.089588][ T5849] Bluetooth: hci0: command tx timeout [ 2035.281483][T17010] block nbd6: shutting down sockets [ 2035.399707][ T5849] Bluetooth: hci4: command tx timeout [ 2035.642727][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2035.750872][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2035.813470][ T67] bond0 (unregistering): Released all slaves [ 2036.336847][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2036.429984][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2036.483837][ T67] bond0 (unregistering): Released all slaves [ 2036.552016][T12953] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.552179][T12953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.565076][T16957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2036.782207][T16957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2036.882037][ C0] vkms_vblank_simulate: vblank timer overrun [ 2037.299474][ C0] vkms_vblank_simulate: vblank timer overrun [ 2037.476547][T12953] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.479600][T12953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2037.481665][ T5849] Bluetooth: hci4: command tx timeout [ 2037.533603][T16957] team0: Port device team_slave_0 added [ 2037.590177][T16825] 8021q: adding VLAN 0 to HW filter on device team0 [ 2037.595042][T16957] team0: Port device team_slave_1 added [ 2037.662503][T16975] chnl_net:caif_netlink_parms(): no params data found [ 2037.827889][ T67] hsr_slave_0: left promiscuous mode [ 2037.848395][ T67] hsr_slave_1: left promiscuous mode [ 2037.849111][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2037.892172][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2038.057404][ T67] hsr_slave_0: left promiscuous mode [ 2038.089517][ T67] hsr_slave_1: left promiscuous mode [ 2038.090223][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2038.112593][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2039.247318][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2039.466342][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2039.515502][ C0] vkms_vblank_simulate: vblank timer overrun [ 2040.182152][ C0] vkms_vblank_simulate: vblank timer overrun [ 2040.765490][ C0] vkms_vblank_simulate: vblank timer overrun [ 2040.882883][ C0] vkms_vblank_simulate: vblank timer overrun [ 2041.163091][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2041.322993][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2042.570621][T16957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.570642][T16957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.570674][T16957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.580058][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.580244][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.883474][T16977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2042.902136][T16977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2042.903494][T16977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2042.905413][T16977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2042.908474][T16977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2043.917642][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.917755][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.960130][T16977] ================================================================== [ 2043.960152][T16977] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.960322][T16977] Read of size 8 at addr ffff88805bc9e798 by task kworker/u9:1/16977 [ 2043.960339][T16977] [ 2043.960369][T16977] CPU: 0 UID: 0 PID: 16977 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2043.960393][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2043.960408][T16977] Workqueue: hci6 hci_rx_work [ 2043.960477][T16977] Call Trace: [ 2043.960486][T16977] [ 2043.960495][T16977] dump_stack_lvl+0x189/0x250 [ 2043.960580][T16977] ? rcu_is_watching+0x15/0xb0 [ 2043.960632][T16977] ? __kasan_check_byte+0x12/0x40 [ 2043.960680][T16977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2043.960708][T16977] ? rcu_is_watching+0x15/0xb0 [ 2043.960738][T16977] ? lock_release+0x4b/0x3e0 [ 2043.960781][T16977] ? __virt_addr_valid+0x1c8/0x5c0 [ 2043.960807][T16977] ? __virt_addr_valid+0x4a5/0x5c0 [ 2043.960825][T16977] print_report+0xca/0x240 [ 2043.960849][T16977] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.960877][T16977] kasan_report+0x118/0x150 [ 2043.960904][T16977] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.960929][T16977] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.960951][T16977] l2cap_connect_cfm+0x377/0x1040 [ 2043.961006][T16977] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2043.961037][T16977] ? mutex_lock_nested+0x154/0x1d0 [ 2043.961104][T16977] ? hci_connect_cfm+0x2c/0x140 [ 2043.961149][T16977] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2043.961180][T16977] hci_connect_cfm+0x92/0x140 [ 2043.961207][T16977] le_conn_complete_evt+0xcd3/0x1220 [ 2043.961262][T16977] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2043.961312][T16977] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2043.961344][T16977] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2043.961369][T16977] ? skb_pull_data+0xfb/0x200 [ 2043.961460][T16977] hci_le_conn_complete_evt+0x187/0x450 [ 2043.961490][T16977] hci_event_packet+0x78f/0x1200 [ 2043.961514][T16977] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2043.961541][T16977] ? __pfx_hci_event_packet+0x10/0x10 [ 2043.961563][T16977] ? __pfx_migrate_enable+0x10/0x10 [ 2043.961593][T16977] ? __rcu_read_unlock+0x84/0xe0 [ 2043.961618][T16977] ? hci_send_to_monitor+0xe2/0x570 [ 2043.961667][T16977] hci_rx_work+0x46a/0xe80 [ 2043.961693][T16977] ? process_scheduled_works+0x9ef/0x17b0 [ 2043.961723][T16977] process_scheduled_works+0xade/0x17b0 [ 2043.961760][T16977] ? __pfx_process_scheduled_works+0x10/0x10 [ 2043.961792][T16977] worker_thread+0x8a0/0xda0 [ 2043.961818][T16977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2043.961852][T16977] ? __kthread_parkme+0x7b/0x200 [ 2043.961890][T16977] kthread+0x70e/0x8a0 [ 2043.961920][T16977] ? __pfx_worker_thread+0x10/0x10 [ 2043.961945][T16977] ? __pfx_kthread+0x10/0x10 [ 2043.961976][T16977] ? __pfx_kthread+0x10/0x10 [ 2043.962006][T16977] ret_from_fork+0x3f9/0x770 [ 2043.962042][T16977] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.962070][T16977] ? __switch_to_asm+0x39/0x70 [ 2043.962088][T16977] ? __switch_to_asm+0x33/0x70 [ 2043.962106][T16977] ? __pfx_kthread+0x10/0x10 [ 2043.962136][T16977] ret_from_fork_asm+0x1a/0x30 [ 2043.962162][T16977] [ 2043.962170][T16977] [ 2043.962174][T16977] Allocated by task 16977: [ 2043.962189][T16977] kasan_save_track+0x3e/0x80 [ 2043.962211][T16977] __kasan_kmalloc+0x93/0xb0 [ 2043.962233][T16977] __kmalloc_noprof+0x1ef/0x430 [ 2043.962271][T16977] sk_prot_alloc+0xe7/0x220 [ 2043.962324][T16977] sk_alloc+0x3a/0x370 [ 2043.962351][T16977] bt_sock_alloc+0x3b/0x310 [ 2043.962391][T16977] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 2043.962410][T16977] l2cap_connect_cfm+0x377/0x1040 [ 2043.962442][T16977] hci_connect_cfm+0x92/0x140 [ 2043.962465][T16977] le_conn_complete_evt+0xcd3/0x1220 [ 2043.962490][T16977] hci_le_conn_complete_evt+0x187/0x450 [ 2043.962513][T16977] hci_event_packet+0x78f/0x1200 [ 2043.962532][T16977] hci_rx_work+0x46a/0xe80 [ 2043.962551][T16977] process_scheduled_works+0xade/0x17b0 [ 2043.962573][T16977] worker_thread+0x8a0/0xda0 [ 2043.962595][T16977] kthread+0x70e/0x8a0 [ 2043.962621][T16977] ret_from_fork+0x3f9/0x770 [ 2043.962643][T16977] ret_from_fork_asm+0x1a/0x30 [ 2043.962660][T16977] [ 2043.962664][T16977] Freed by task 17024: [ 2043.962672][T16977] kasan_save_track+0x3e/0x80 [ 2043.962692][T16977] kasan_save_free_info+0x46/0x50 [ 2043.962714][T16977] __kasan_slab_free+0x5b/0x80 [ 2043.962735][T16977] kfree+0x195/0x550 [ 2043.962756][T16977] __sk_destruct+0x4e4/0x670 [ 2043.962771][T16977] l2cap_sock_cleanup_listen+0xda/0x3e0 [ 2043.962788][T16977] l2cap_sock_release+0x6a/0x230 [ 2043.962816][T16977] sock_close+0xc3/0x240 [ 2043.962847][T16977] __fput+0x45b/0xa80 [ 2043.962877][T16977] task_work_run+0x1d4/0x260 [ 2043.962893][T16977] exit_to_user_mode_loop+0xec/0x110 [ 2043.962918][T16977] do_syscall_64+0x2bd/0x3b0 [ 2043.962951][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.962982][T16977] [ 2043.962987][T16977] The buggy address belongs to the object at ffff88805bc9e000 [ 2043.962987][T16977] which belongs to the cache kmalloc-2k of size 2048 [ 2043.963004][T16977] The buggy address is located 1944 bytes inside of [ 2043.963004][T16977] freed 2048-byte region [ffff88805bc9e000, ffff88805bc9e800) [ 2043.963025][T16977] [ 2043.963030][T16977] The buggy address belongs to the physical page: [ 2043.963049][T16977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bc98 [ 2043.963071][T16977] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2043.963088][T16977] flags: 0x80000000000040(head|node=0|zone=1) [ 2043.963108][T16977] page_type: f5(slab) [ 2043.963127][T16977] raw: 0080000000000040 ffff888019842000 dead000000000100 dead000000000122 [ 2043.963144][T16977] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 2043.963163][T16977] head: 0080000000000040 ffff888019842000 dead000000000100 dead000000000122 [ 2043.963181][T16977] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 2043.963198][T16977] head: 0080000000000003 ffffea00016f2601 00000000ffffffff 00000000ffffffff [ 2043.963215][T16977] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2043.963225][T16977] page dumped because: kasan: bad access detected [ 2043.963240][T16977] page_owner tracks the page as allocated [ 2043.963247][T16977] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 150, tgid 150 (kworker/u8:6), ts 2023558210694, free_ts 2023434027916 [ 2043.963282][T16977] post_alloc_hook+0x240/0x2a0 [ 2043.963308][T16977] get_page_from_freelist+0x2119/0x21b0 [ 2043.963325][T16977] __alloc_frozen_pages_noprof+0x181/0x370 [ 2043.963343][T16977] alloc_pages_mpol+0xd1/0x380 [ 2043.963367][T16977] allocate_slab+0x8a/0x370 [ 2043.963384][T16977] ___slab_alloc+0x8d1/0xdc0 [ 2043.963410][T16977] __kmalloc_node_track_caller_noprof+0x14c/0x450 [ 2043.963436][T16977] kmalloc_reserve+0x136/0x290 [ 2043.963462][T16977] __alloc_skb+0x142/0x2d0 [ 2043.963486][T16977] inet6_ifinfo_notify+0x70/0x120 [ 2043.963538][T16977] addrconf_notify+0xc4e/0x1010 [ 2043.963560][T16977] notifier_call_chain+0x1b3/0x3e0 [ 2043.963584][T16977] netif_state_change+0x284/0x3a0 [ 2043.963624][T16977] linkwatch_do_dev+0x117/0x170 [ 2043.963662][T16977] __linkwatch_run_queue+0x56d/0x7e0 [ 2043.963680][T16977] linkwatch_event+0x4c/0x60 [ 2043.963697][T16977] page last free pid 16749 tgid 16749 stack trace: [ 2043.963709][T16977] __free_frozen_pages+0xb59/0xce0 [ 2043.963735][T16977] __put_partials+0x159/0x1a0 [ 2043.963750][T16977] __slab_free+0x2b3/0x390 [ 2043.963768][T16977] qlist_free_all+0x97/0x140 [ 2043.963787][T16977] kasan_quarantine_reduce+0x148/0x160 [ 2043.963807][T16977] __kasan_slab_alloc+0x22/0x80 [ 2043.963829][T16977] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 2043.963854][T16977] __alloc_skb+0x112/0x2d0 [ 2043.963886][T16977] rtmsg_ifinfo_build_skb+0x84/0x260 [ 2043.963922][T16977] rtnetlink_event+0x1b7/0x270 [ 2043.963946][T16977] notifier_call_chain+0x1b3/0x3e0 [ 2043.963970][T16977] netif_set_mac_address+0x37c/0x4c0 [ 2043.964033][T16977] do_setlink+0x88c/0x41c0 [ 2043.964059][T16977] rtnl_newlink+0x160b/0x1c70 [ 2043.964083][T16977] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2043.964106][T16977] netlink_rcv_skb+0x205/0x470 [ 2043.964162][T16977] [ 2043.964167][T16977] Memory state around the buggy address: [ 2043.964177][T16977] ffff88805bc9e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.964192][T16977] ffff88805bc9e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.964205][T16977] >ffff88805bc9e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.964216][T16977] ^ [ 2043.964226][T16977] ffff88805bc9e800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2043.964239][T16977] ffff88805bc9e880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2043.964249][T16977] ================================================================== [ 2043.964269][T16977] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2043.964284][T16977] CPU: 0 UID: 0 PID: 16977 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2043.964306][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2043.964319][T16977] Workqueue: hci6 hci_rx_work [ 2043.964342][T16977] Call Trace: [ 2043.964349][T16977] [ 2043.964358][T16977] dump_stack_lvl+0x99/0x250 [ 2043.964393][T16977] ? __asan_memcpy+0x40/0x70 [ 2043.964413][T16977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2043.964441][T16977] ? __pfx__printk+0x10/0x10 [ 2043.964467][T16977] vpanic+0x281/0x750 [ 2043.964495][T16977] ? __pfx_print_hex_dump+0x10/0x10 [ 2043.964578][T16977] ? __pfx_vpanic+0x10/0x10 [ 2043.964612][T16977] panic+0xb9/0xc0 [ 2043.964639][T16977] ? __pfx_panic+0x10/0x10 [ 2043.964666][T16977] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2043.964698][T16977] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2043.964731][T16977] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.964753][T16977] check_panic_on_warn+0x89/0xb0 [ 2043.964772][T16977] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.964792][T16977] end_report+0x78/0x160 [ 2043.964816][T16977] kasan_report+0x129/0x150 [ 2043.964842][T16977] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.964914][T16977] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 2043.964937][T16977] l2cap_connect_cfm+0x377/0x1040 [ 2043.964971][T16977] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2043.965003][T16977] ? mutex_lock_nested+0x154/0x1d0 [ 2043.965026][T16977] ? hci_connect_cfm+0x2c/0x140 [ 2043.965052][T16977] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2043.965082][T16977] hci_connect_cfm+0x92/0x140 [ 2043.965109][T16977] le_conn_complete_evt+0xcd3/0x1220 [ 2043.965139][T16977] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2043.965175][T16977] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2043.965206][T16977] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2043.965230][T16977] ? skb_pull_data+0xfb/0x200 [ 2043.965254][T16977] hci_le_conn_complete_evt+0x187/0x450 [ 2043.965283][T16977] hci_event_packet+0x78f/0x1200 [ 2043.965307][T16977] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2043.965333][T16977] ? __pfx_hci_event_packet+0x10/0x10 [ 2043.965354][T16977] ? __pfx_migrate_enable+0x10/0x10 [ 2043.965378][T16977] ? __rcu_read_unlock+0x84/0xe0 [ 2043.965403][T16977] ? hci_send_to_monitor+0xe2/0x570 [ 2043.965433][T16977] hci_rx_work+0x46a/0xe80 [ 2043.965458][T16977] ? process_scheduled_works+0x9ef/0x17b0 [ 2043.965483][T16977] process_scheduled_works+0xade/0x17b0 [ 2043.965518][T16977] ? __pfx_process_scheduled_works+0x10/0x10 [ 2043.965550][T16977] worker_thread+0x8a0/0xda0 [ 2043.965575][T16977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2043.965608][T16977] ? __kthread_parkme+0x7b/0x200 [ 2043.965637][T16977] kthread+0x70e/0x8a0 [ 2043.965668][T16977] ? __pfx_worker_thread+0x10/0x10 [ 2043.965692][T16977] ? __pfx_kthread+0x10/0x10 [ 2043.965722][T16977] ? __pfx_kthread+0x10/0x10 [ 2043.965751][T16977] ret_from_fork+0x3f9/0x770 [ 2043.965778][T16977] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.965806][T16977] ? __switch_to_asm+0x39/0x70 [ 2043.965861][T16977] ? __switch_to_asm+0x33/0x70 [ 2043.965896][T16977] ? __pfx_kthread+0x10/0x10 [ 2043.965964][T16977] ret_from_fork_asm+0x1a/0x30 [ 2043.966001][T16977] [ 2043.966333][T16977] Kernel Offset: disabled