last executing test programs: 2m7.77481796s ago: executing program 3 (id=37): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) syz_usb_connect(0x4, 0x20c, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1fa, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x7, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}, [@mdlm={0x15, 0x24, 0x12, 0xe228}, @mdlm_detail={0x24, 0x24, 0x13, 0x7f, "63832544b5992729c2c21e14138e14d2545f2904857f9925c82a39c66ef2f284"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x8, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x3, 0x9c, 0x6, 0xd2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}, @generic={0x18, 0x22, "dc18ffa56b88c91cf826bf9af4fcb8b91f3729e3a30a"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x39, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7a672792b752e6a5c7463e513298db741b78a4a9d74d102f10f74f1"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x8d, 0x6}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0xa5, &(0x7f00000019c0)={0x5, 0xf, 0xa5, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x81, 0x1, 0x100, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "34e85c8f6f181c451c2b7a643255ac3e"}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x6, 0x0, 0xfffc, [0xffff0f, 0x3fc0, 0x3fc0, 0xffc000]}, @generic={0x2d, 0x10, 0xb, "5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab043ab2e57f5330448a63953b7a4b6161356"}, @ssp_cap={0x24, 0x10, 0xa, 0x96, 0x6, 0x10000, 0x780f, 0x8, [0xc0, 0x0, 0xff3f3f, 0xc0, 0x6f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "657292ed87d0b33653ec67e4f197bec1"}]}, 0x5, [{0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x21, &(0x7f0000001ac0)=@string={0x21, 0x3, "91934ed6cfe4cbd1be2cad26b5a8b95f817f8d0e1af255325cc324dceec7d7"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) 1m59.124732891s ago: executing program 3 (id=47): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822948828", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="3256610ce79d5ba6661e963ebdd4a13f920a4a5faf894f3e6c9625", 0x1b}, {&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0", 0x4d}], 0x2}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m50.122792391s ago: executing program 3 (id=60): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10a600, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1m43.3469292s ago: executing program 3 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x51}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) 1m40.385167953s ago: executing program 3 (id=71): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x3, 0x3ed4, 0x4}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) stat(&(0x7f00000000c0)='./file0\x00', 0x0) statx(r1, 0x0, 0x800, 0x0, 0x0) getgid() socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) socket$unix(0x1, 0x2, 0x0) 1m38.32168997s ago: executing program 3 (id=74): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=']) 1m22.447196325s ago: executing program 32 (id=74): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=']) 22.83602055s ago: executing program 4 (id=175): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 19.036503246s ago: executing program 0 (id=177): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) fstat(r1, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x4040001) 19.030942084s ago: executing program 4 (id=178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {0x0}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c", 0x54}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa55", 0xc9}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d90", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed30b2b", 0xe}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334", 0x6a}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.950774045s ago: executing program 2 (id=179): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r4, r3, 0x80000) 17.685590231s ago: executing program 0 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x51}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}]}]}}}]}, 0x44}}, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) 16.622396641s ago: executing program 4 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="b49c"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) execve(0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) 15.099283293s ago: executing program 0 (id=183): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 14.648116301s ago: executing program 4 (id=184): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x19e1}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22}, 0x94) 14.152133262s ago: executing program 0 (id=185): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x341, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair(0x1d, 0x800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) shutdown(r9, 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x3d04, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 13.296011972s ago: executing program 4 (id=186): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x341, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair(0x1d, 0x800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) shutdown(r9, 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x3d04, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 12.486737669s ago: executing program 2 (id=187): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000fed000/0x10000)=nil, 0x10000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0xb71, 0x9}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x11) syz_emit_ethernet(0x56, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400, 0x0, 0x1, 0x8, 0xe, 0x5}, 0x20) 10.790516425s ago: executing program 2 (id=188): clock_nanosleep(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f00000006c0)=@ethtool_eeprom={0x43, 0xf9, 0x5, 0x167, "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"}}) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 9.828288549s ago: executing program 1 (id=190): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) 8.596732435s ago: executing program 1 (id=191): clock_nanosleep(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f00000006c0)=@ethtool_eeprom={0x43, 0xf9, 0x5, 0x164, "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"}}) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 8.41075507s ago: executing program 2 (id=192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="b49c"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) execve(0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) 6.743036188s ago: executing program 2 (id=193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040ca150618400001020301090103204009040000000103201944"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x102900, 0x0) 6.416132184s ago: executing program 1 (id=194): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x51}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) 5.303614058s ago: executing program 1 (id=195): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 3.612175392s ago: executing program 1 (id=196): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r4, r3, 0x80000) 3.194436643s ago: executing program 0 (id=197): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.678117328s ago: executing program 4 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r4, 0x2007ffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 566.953818ms ago: executing program 1 (id=199): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x3, 0x3ed4, 0x4}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) statx(r1, 0x0, 0x800, 0x0, 0x0) getgid() setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) socket$unix(0x1, 0x2, 0x0) 545.318795ms ago: executing program 0 (id=200): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000fed000/0x10000)=nil, 0x10000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0xb71, 0x9}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x11) syz_emit_ethernet(0x56, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400, 0x0, 0x1, 0x8, 0xe, 0x5}, 0x20) 0s ago: executing program 2 (id=201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 77.887550][ T5802] cgroup: Unknown subsys name 'net' [ 78.108087][ T5802] cgroup: Unknown subsys name 'cpuset' [ 78.183357][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.876032][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.732449][ T821] cfg80211: failed to load regulatory.db [ 82.397159][ T5136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.406685][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.409091][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.413399][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.418274][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.458214][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.469345][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.472320][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.474981][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.477412][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.525674][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.571973][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.592340][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.615969][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.616561][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.618513][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.646926][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.663803][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.667394][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.692484][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.699735][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.714465][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.716364][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.718864][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.720017][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.677969][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 83.725609][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 83.738116][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 83.781287][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 83.866063][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 84.045945][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.046067][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.046188][ T5816] bridge_slave_0: entered allmulticast mode [ 84.047688][ T5816] bridge_slave_0: entered promiscuous mode [ 84.111716][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.111820][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.111980][ T5816] bridge_slave_1: entered allmulticast mode [ 84.127514][ T5816] bridge_slave_1: entered promiscuous mode [ 84.131781][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.131920][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.132387][ T5818] bridge_slave_0: entered allmulticast mode [ 84.136055][ T5818] bridge_slave_0: entered promiscuous mode [ 84.139286][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.139393][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.139842][ T5819] bridge_slave_0: entered allmulticast mode [ 84.144360][ T5819] bridge_slave_0: entered promiscuous mode [ 84.206904][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.207028][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.207182][ T5818] bridge_slave_1: entered allmulticast mode [ 84.209926][ T5818] bridge_slave_1: entered promiscuous mode [ 84.216432][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.216543][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.217431][ T5819] bridge_slave_1: entered allmulticast mode [ 84.219813][ T5819] bridge_slave_1: entered promiscuous mode [ 84.243486][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.243598][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.244039][ T5817] bridge_slave_0: entered allmulticast mode [ 84.246366][ T5817] bridge_slave_0: entered promiscuous mode [ 84.337324][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.337460][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.337928][ T5817] bridge_slave_1: entered allmulticast mode [ 84.339440][ T5817] bridge_slave_1: entered promiscuous mode [ 84.346801][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.396444][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.396569][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.396735][ T5820] bridge_slave_0: entered allmulticast mode [ 84.398376][ T5820] bridge_slave_0: entered promiscuous mode [ 84.432947][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.436263][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.441480][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.442215][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.442322][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.442457][ T5820] bridge_slave_1: entered allmulticast mode [ 84.447619][ T5820] bridge_slave_1: entered promiscuous mode [ 84.495668][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.498860][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.523929][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.578448][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.580224][ T5816] team0: Port device team_slave_0 added [ 84.624478][ T5136] Bluetooth: hci3: command tx timeout [ 84.624487][ T59] Bluetooth: hci4: command tx timeout [ 84.784505][ T59] Bluetooth: hci1: command tx timeout [ 84.784634][ T59] Bluetooth: hci0: command tx timeout [ 84.785122][ T59] Bluetooth: hci2: command tx timeout [ 84.911014][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.928813][ T5816] team0: Port device team_slave_1 added [ 84.930750][ T5818] team0: Port device team_slave_0 added [ 84.932569][ T5819] team0: Port device team_slave_0 added [ 84.951752][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.980877][ T5818] team0: Port device team_slave_1 added [ 84.982460][ T5819] team0: Port device team_slave_1 added [ 85.005558][ T5817] team0: Port device team_slave_0 added [ 85.058538][ T5817] team0: Port device team_slave_1 added [ 85.059378][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.059388][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.059401][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.110990][ T5820] team0: Port device team_slave_0 added [ 85.125989][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.126001][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.126015][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.127074][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.127082][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.127095][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.225922][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.225941][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.225955][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.228196][ T5820] team0: Port device team_slave_1 added [ 85.262475][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.262493][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.262516][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.267350][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.267365][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.267402][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.289065][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.289081][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.289105][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.343379][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.343397][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.343420][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.357432][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.357451][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.357474][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.398297][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.398315][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.398339][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.511580][ T5816] hsr_slave_0: entered promiscuous mode [ 85.513843][ T5816] hsr_slave_1: entered promiscuous mode [ 85.566798][ T5818] hsr_slave_0: entered promiscuous mode [ 85.567555][ T5818] hsr_slave_1: entered promiscuous mode [ 85.568168][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 85.568249][ T5818] Cannot create hsr debugfs directory [ 85.576719][ T5819] hsr_slave_0: entered promiscuous mode [ 85.577943][ T5819] hsr_slave_1: entered promiscuous mode [ 85.578808][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 85.578830][ T5819] Cannot create hsr debugfs directory [ 85.921201][ T5817] hsr_slave_0: entered promiscuous mode [ 85.922013][ T5817] hsr_slave_1: entered promiscuous mode [ 85.922535][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 85.922552][ T5817] Cannot create hsr debugfs directory [ 85.990656][ T5820] hsr_slave_0: entered promiscuous mode [ 85.991405][ T5820] hsr_slave_1: entered promiscuous mode [ 85.991944][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 85.991960][ T5820] Cannot create hsr debugfs directory [ 86.606147][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.662181][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.684021][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.703033][ T59] Bluetooth: hci3: command tx timeout [ 86.703067][ T5823] Bluetooth: hci4: command tx timeout [ 86.727685][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.730043][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.766941][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.783114][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.830128][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.863203][ T5823] Bluetooth: hci1: command tx timeout [ 86.873729][ T5823] Bluetooth: hci0: command tx timeout [ 86.873760][ T5823] Bluetooth: hci2: command tx timeout [ 86.949097][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.987630][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.990373][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.017183][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.019585][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.057004][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.080382][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.116832][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.254174][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.278895][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.288098][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.327193][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.330886][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.357962][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.395302][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.437435][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.581824][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.639270][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.652189][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.687114][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.700421][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.726990][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.731624][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.758947][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.798010][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.944873][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.950402][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.989827][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.008354][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.047420][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.051118][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.087086][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.094839][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.125672][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.134739][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.134943][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.148913][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.195831][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.195935][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.278064][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.320407][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.320535][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.360256][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.371711][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.390522][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.527158][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.599070][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.604270][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.634216][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.664483][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.664559][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.771752][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.784836][ T59] Bluetooth: hci4: command tx timeout [ 88.784868][ T59] Bluetooth: hci3: command tx timeout [ 88.861880][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.862084][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.897628][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.936707][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.936838][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.943494][ T5823] Bluetooth: hci1: command tx timeout [ 88.943523][ T59] Bluetooth: hci2: command tx timeout [ 88.943534][ T5823] Bluetooth: hci0: command tx timeout [ 89.065182][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.094058][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.151132][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.151343][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.219209][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.219312][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.363545][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.473599][ T5816] veth0_vlan: entered promiscuous mode [ 89.595266][ T5816] veth1_vlan: entered promiscuous mode [ 89.680565][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.845957][ T5816] veth0_macvtap: entered promiscuous mode [ 89.879334][ T5816] veth1_macvtap: entered promiscuous mode [ 89.886342][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.009045][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.030155][ T5817] veth0_vlan: entered promiscuous mode [ 90.041958][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.092668][ T5817] veth1_vlan: entered promiscuous mode [ 90.098128][ T1315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113371][ T1315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134967][ T1315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.141886][ T1315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.280350][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.316941][ T5818] veth0_vlan: entered promiscuous mode [ 90.435261][ T5819] veth0_vlan: entered promiscuous mode [ 90.481848][ T5818] veth1_vlan: entered promiscuous mode [ 90.511535][ T5817] veth0_macvtap: entered promiscuous mode [ 90.537674][ T5819] veth1_vlan: entered promiscuous mode [ 90.566076][ T5817] veth1_macvtap: entered promiscuous mode [ 90.639157][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.639183][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.716028][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.782681][ T5820] veth0_vlan: entered promiscuous mode [ 90.791070][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.795180][ T5818] veth0_macvtap: entered promiscuous mode [ 90.809395][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.809414][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.840774][ T5818] veth1_macvtap: entered promiscuous mode [ 90.861132][ T3520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.863626][ T5136] Bluetooth: hci3: command tx timeout [ 90.863656][ T5136] Bluetooth: hci4: command tx timeout [ 90.889845][ T5819] veth0_macvtap: entered promiscuous mode [ 90.899765][ T3520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.912638][ T3520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.928683][ T5820] veth1_vlan: entered promiscuous mode [ 90.930158][ T3520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.976477][ T5819] veth1_macvtap: entered promiscuous mode [ 91.022986][ T5136] Bluetooth: hci1: command tx timeout [ 91.023019][ T5136] Bluetooth: hci2: command tx timeout [ 91.023061][ T59] Bluetooth: hci0: command tx timeout [ 91.131449][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.225056][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.296895][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.373805][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.377523][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413188][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.424615][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.427946][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.501965][ T5820] veth0_macvtap: entered promiscuous mode [ 91.514958][ T1359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.592006][ T1359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.607232][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.607254][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.637186][ T1359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692586][ T5820] veth1_macvtap: entered promiscuous mode [ 91.700199][ T1359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.432612][ T1359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.432632][ T1359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.650409][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.809391][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.825821][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.825835][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.917765][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989165][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013185][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.054238][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.073430][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.073450][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.739620][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.739641][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.989256][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.989276][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.281380][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.281403][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.374912][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.374933][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.644782][ T5990] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure [ 107.592804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.542811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.562825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.572782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.582818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.592800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.602826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.612802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.622796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.632784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.483328][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.554454][ T6094] ubi16: attaching mtd0 [ 126.946429][ T6094] ubi16: scanning is finished [ 126.946446][ T6094] ubi16: empty MTD device detected [ 131.177159][ T6094] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 133.153796][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.153895][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.566340][ T6150] vivid-002: disconnect [ 138.173821][ T6146] vivid-002: reconnect [ 146.472955][ T54] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.564814][ T6209] hub 8-0:1.0: USB hub found [ 148.597192][ T6209] hub 8-0:1.0: 1 port detected [ 150.015350][ T6217] vivid-000: disconnect [ 150.129247][ T6218] ======================================================= [ 150.129247][ T6218] WARNING: The mand mount option has been deprecated and [ 150.129247][ T6218] and is ignored by this kernel. Remove the mand [ 150.129247][ T6218] option from the mount to silence this warning. [ 150.129247][ T6218] ======================================================= [ 150.212364][ T6212] vivid-000: reconnect [ 154.268439][ T54] usb 1-1: device descriptor read/all, error -110 [ 155.412943][ T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.762768][ T6254] syz.2.88 (6254) used greatest stack depth: 18072 bytes left [ 158.783918][ T6265] vivid-004: disconnect [ 159.441063][ T6259] vivid-004: reconnect [ 162.857392][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.894878][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.896087][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.897394][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.691232][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.590276][ T59] Bluetooth: hci5: command tx timeout [ 167.023824][ T6307] vivid-001: disconnect [ 167.762726][ T6302] vivid-001: reconnect [ 168.828471][ T59] Bluetooth: hci5: command tx timeout [ 170.897392][ T59] Bluetooth: hci5: command tx timeout [ 171.365224][ T6335] hub 8-0:1.0: USB hub found [ 171.366677][ T6335] hub 8-0:1.0: 1 port detected [ 171.381027][ T6288] chnl_net:caif_netlink_parms(): no params data found [ 173.023320][ T59] Bluetooth: hci5: command tx timeout [ 178.936741][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 179.025001][ T6366] ubi16: attaching mtd0 [ 179.030862][ T6366] ubi16: scanning is finished [ 179.667076][ T6366] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 185.885461][ T6404] vivid-001: disconnect [ 185.885806][ T6398] vivid-001: reconnect [ 186.112565][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.115549][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.115870][ T6288] bridge_slave_0: entered allmulticast mode [ 186.132094][ T6288] bridge_slave_0: entered promiscuous mode [ 187.376724][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 191.364293][ T6438] hub 8-0:1.0: USB hub found [ 191.366513][ T6438] hub 8-0:1.0: 1 port detected [ 192.627823][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.614282][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.614357][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.930078][ T6453] ubi16: attaching mtd0 [ 197.357405][ T6453] ubi16: scanning is finished [ 197.381904][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.381973][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.382140][ T6288] bridge_slave_1: entered allmulticast mode [ 197.412029][ T6288] bridge_slave_1: entered promiscuous mode [ 197.524043][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.592362][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.854654][ T6453] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 198.047364][ T6462] ubi16: attaching mtd0 [ 198.049375][ T6462] ubi16: scanning is finished [ 198.507645][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.418674][ T6462] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 199.419768][ T6288] team0: Port device team_slave_0 added [ 199.619881][ T6288] team0: Port device team_slave_1 added [ 201.767730][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.868346][ T6490] hub 8-0:1.0: USB hub found [ 201.868673][ T6490] hub 8-0:1.0: 1 port detected [ 202.404865][ T3520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.484894][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.484908][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.484922][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.490298][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.490310][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.490486][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.399683][ T6502] Zero length message leads to an empty skb [ 206.370602][ T6508] hub 8-0:1.0: USB hub found [ 206.380706][ T6508] hub 8-0:1.0: 1 port detected [ 207.344908][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 207.422884][ T5136] Bluetooth: hci3: command 0x0406 tx timeout [ 207.436665][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 209.081560][ T6288] hsr_slave_0: entered promiscuous mode [ 209.098179][ T6288] hsr_slave_1: entered promiscuous mode [ 209.101427][ T6288] debugfs: 'hsr0' already exists in 'hsr' [ 209.101456][ T6288] Cannot create hsr debugfs directory [ 211.408186][ T6531] overlayfs: failed to resolve './file0': -2 [ 212.485576][ T6537] hub 8-0:1.0: USB hub found [ 212.485922][ T6537] hub 8-0:1.0: 1 port detected [ 215.985066][ T3520] bridge_slave_1: left allmulticast mode [ 215.985239][ T3520] bridge_slave_1: left promiscuous mode [ 216.152829][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.581826][ T3520] bridge_slave_0: left allmulticast mode [ 216.581858][ T3520] bridge_slave_0: left promiscuous mode [ 216.582112][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.723561][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 217.084631][ T5905] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 217.084671][ T5905] usb 3-1: can't read configurations, error -61 [ 217.382973][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.756617][ T5905] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 217.756655][ T5905] usb 3-1: can't read configurations, error -61 [ 218.651699][ T5905] usb usb3-port1: attempt power cycle [ 219.290658][ T6581] overlayfs: failed to resolve './file1': -2 [ 219.299024][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 220.461389][ T5905] usb 3-1: device descriptor read/8, error -71 [ 224.518149][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.573587][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.574770][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.582070][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.593065][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.051189][ T6624] hub 8-0:1.0: USB hub found [ 226.057831][ T6624] hub 8-0:1.0: 1 port detected [ 226.842877][ T5825] Bluetooth: hci0: command tx timeout [ 227.376201][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.236410][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.280545][ T3520] bond0 (unregistering): Released all slaves [ 228.692959][ T6639] overlayfs: failed to resolve './file1': -2 [ 228.862842][ T5825] Bluetooth: hci0: command tx timeout [ 230.948920][ T5825] Bluetooth: hci0: command tx timeout [ 233.051641][ T5825] Bluetooth: hci0: command tx timeout [ 237.069792][ T5481] 8021q: adding VLAN 0 to HW filter on device eth1 [ 237.265298][ T6668] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 237.268109][ T6668] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 237.268148][ T6668] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 237.432232][ T6704] hub 8-0:1.0: USB hub found [ 237.435930][ T6704] hub 8-0:1.0: 1 port detected [ 237.962868][ T5829] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 238.208962][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.208987][ T5829] usb 3-1: can't read configurations, error -61 [ 238.342891][ T5829] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 238.605361][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.605389][ T5829] usb 3-1: can't read configurations, error -61 [ 238.626285][ T5829] usb usb3-port1: attempt power cycle [ 239.837401][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.004167][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 243.000212][ T3520] hsr_slave_0: left promiscuous mode [ 243.045921][ T3520] hsr_slave_1: left promiscuous mode [ 243.151454][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.168266][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.274220][ T5829] usb 3-1: device descriptor read/all, error -71 [ 244.213821][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.213850][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.303032][ T5883] ------------[ cut here ]------------ [ 244.303047][ T5883] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 244.303071][ T5883] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:4/5883 [ 244.303116][ T5883] Modules linked in: [ 244.303155][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.303176][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.303188][ T5883] Workqueue: events drm_fb_helper_damage_work [ 244.303221][ T5883] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 244.303248][ T5883] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0a 28 d1 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 244.303264][ T5883] RSP: 0000:ffffc900057d78c0 EFLAGS: 00010246 [ 244.303279][ T5883] RAX: 1ffff11004bf5a00 RBX: ffffffff8f96bab0 RCX: 0000000000000000 [ 244.303293][ T5883] RDX: ffffffff8bc03640 RSI: ffffffff8bc1fce0 RDI: ffffffff8f96bab0 [ 244.303307][ T5883] RBP: ffffc900057d79a8 R08: 0000000000000000 R09: 0000000000000000 [ 244.303320][ T5883] R10: dffffc0000000000 R11: fffffbfff1f1771f R12: ffffffff8bc1fce0 [ 244.303334][ T5883] R13: ffff888025fad000 R14: 0000000000000000 R15: ffffffff8bc03640 [ 244.303347][ T5883] FS: 0000000000000000(0000) GS:ffff888126101000(0000) knlGS:0000000000000000 [ 244.303362][ T5883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.303375][ T5883] CR2: 00007fb4a968dba0 CR3: 000000003d45c000 CR4: 00000000003526f0 [ 244.303391][ T5883] Call Trace: [ 244.303398][ T5883] [ 244.303411][ T5883] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 244.303438][ T5883] ? rt_spin_unlock+0x14f/0x200 [ 244.303463][ T5883] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.303488][ T5883] ? rt_spin_unlock+0x160/0x200 [ 244.303516][ T5883] ? drm_vblank_get+0x147/0x260 [ 244.303544][ T5883] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 244.303571][ T5883] drm_fb_helper_damage_work+0x131/0x6f0 [ 244.303602][ T5883] ? process_scheduled_works+0xa70/0x1860 [ 244.303637][ T5883] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 244.303670][ T5883] ? process_scheduled_works+0xa70/0x1860 [ 244.303698][ T5883] ? process_scheduled_works+0xa70/0x1860 [ 244.303731][ T5883] process_scheduled_works+0xb5d/0x1860 [ 244.303794][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.303830][ T5883] ? assign_work+0x3d5/0x5e0 [ 244.303871][ T5883] worker_thread+0xa53/0xfc0 [ 244.303931][ T5883] kthread+0x388/0x470 [ 244.303954][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 244.303970][ T5883] ? __pfx_kthread+0x10/0x10 [ 244.303994][ T5883] ret_from_fork+0x514/0xb70 [ 244.304017][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 244.304035][ T5883] ? __switch_to+0xc79/0x1410 [ 244.304065][ T5883] ? __pfx_kthread+0x10/0x10 [ 244.304088][ T5883] ret_from_fork_asm+0x1a/0x30 [ 244.304127][ T5883] [ 244.304136][ T5883] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.304150][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.304171][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.304183][ T5883] Workqueue: events drm_fb_helper_damage_work [ 244.304209][ T5883] Call Trace: [ 244.304217][ T5883] [ 244.304224][ T5883] vpanic+0x56c/0xa60 [ 244.304248][ T5883] ? __pfx__printk+0x10/0x10 [ 244.304271][ T5883] ? __pfx_vpanic+0x10/0x10 [ 244.304288][ T5883] ? is_bpf_text_address+0x292/0x2b0 [ 244.304311][ T5883] ? is_bpf_text_address+0x26/0x2b0 [ 244.304342][ T5883] panic+0xc5/0xd0 [ 244.304360][ T5883] ? __pfx_panic+0x10/0x10 [ 244.304389][ T5883] ? ret_from_fork_asm+0x1a/0x30 [ 244.304416][ T5883] __warn+0x315/0x4c0 [ 244.304438][ T5883] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 244.304467][ T5883] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 244.304496][ T5883] __report_bug+0x29a/0x540 [ 244.304531][ T5883] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 244.304559][ T5883] ? __pfx___report_bug+0x10/0x10 [ 244.304609][ T5883] report_bug_entry+0x19a/0x290 [ 244.304639][ T5883] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 244.304665][ T5883] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 244.304690][ T5883] handle_bug+0xce/0x200 [ 244.304712][ T5883] exc_invalid_op+0x1a/0x50 [ 244.304733][ T5883] asm_exc_invalid_op+0x1a/0x20 [ 244.304752][ T5883] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 244.304779][ T5883] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0a 28 d1 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 244.304794][ T5883] RSP: 0000:ffffc900057d78c0 EFLAGS: 00010246 [ 244.304810][ T5883] RAX: 1ffff11004bf5a00 RBX: ffffffff8f96bab0 RCX: 0000000000000000 [ 244.304823][ T5883] RDX: ffffffff8bc03640 RSI: ffffffff8bc1fce0 RDI: ffffffff8f96bab0 [ 244.304837][ T5883] RBP: ffffc900057d79a8 R08: 0000000000000000 R09: 0000000000000000 [ 244.304850][ T5883] R10: dffffc0000000000 R11: fffffbfff1f1771f R12: ffffffff8bc1fce0 [ 244.304872][ T5883] R13: ffff888025fad000 R14: 0000000000000000 R15: ffffffff8bc03640 [ 244.304907][ T5883] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 244.304932][ T5883] ? rt_spin_unlock+0x14f/0x200 [ 244.304957][ T5883] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.304980][ T5883] ? rt_spin_unlock+0x160/0x200 [ 244.305007][ T5883] ? drm_vblank_get+0x147/0x260 [ 244.305035][ T5883] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 244.305060][ T5883] drm_fb_helper_damage_work+0x131/0x6f0 [ 244.305090][ T5883] ? process_scheduled_works+0xa70/0x1860 [ 244.305123][ T5883] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 244.305155][ T5883] ? process_scheduled_works+0xa70/0x1860 [ 244.305183][ T5883] ? process_scheduled_works+0xa70/0x1860 [ 244.305215][ T5883] process_scheduled_works+0xb5d/0x1860 [ 244.305278][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.305315][ T5883] ? assign_work+0x3d5/0x5e0 [ 244.305349][ T5883] worker_thread+0xa53/0xfc0 [ 244.305396][ T5883] kthread+0x388/0x470 [ 244.305420][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 244.305436][ T5883] ? __pfx_kthread+0x10/0x10 [ 244.305461][ T5883] ret_from_fork+0x514/0xb70 [ 244.305483][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 244.305502][ T5883] ? __switch_to+0xc79/0x1410 [ 244.305532][ T5883] ? __pfx_kthread+0x10/0x10 [ 244.305556][ T5883] ret_from_fork_asm+0x1a/0x30 [ 244.305593][ T5883] [ 244.306089][ T5883] Kernel Offset: disabled