last executing test programs: 1m34.731469124s ago: executing program 2 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x1, @empty, 0x1}, 0x1c) 1m32.709061474s ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x6, 0x10000008, 0x7f, 0x3, 0x7fff, 0x2, 0x0, 0x9, 0x6}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x44004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r6, 0x0, 0x0) 1m32.668070259s ago: executing program 2 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r5, 0x303, 0x4, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000080)=0xa, 0x4) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000040)='timers\x00') r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x4, 0x0, &(0x7f00000004c0)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x107e}, {0xffffffffffffedca, 0xfffffffffffffff9}, {0x4, 0x9}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = dup2(r0, r0) ioctl$TIOCGWINSZ(r5, 0x4008af14, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='caif0\x00') getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040e704300000000000000109022400010000000009041600010300000009210000000122070009058103"], 0x0) 1m29.026918576s ago: executing program 2 (id=15): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0), 0x2) 1m21.871546649s ago: executing program 2 (id=16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0xfffffffe, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x25a1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 1m21.448938839s ago: executing program 3 (id=18): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 1m13.698598774s ago: executing program 2 (id=24): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0xfffffffe, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x25a1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000003c0)={@none, 0x8, 0xd2, 0x8, 0x8, 0x9, "04ac0e1537f1b0d0faea18fc6f5eafe74143b16fdc71518eaad3e6f8cc76edeee6139d545adfca83f1c0f8c1f98d61d8014e063b1b4107cf7d810dc969465361432c18135e9ded8828df37e532408cb28f2ebf96c4e0ab18a1e2a2781bc77abd44f15b80c41c3a9a94fd89eacf400f4cf09d34d5d57b57fd0f307a95b5ddeedd"}) socket$inet_udp(0x2, 0x2, 0x0) write(r1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m8.503097744s ago: executing program 2 (id=27): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 1m8.370676871s ago: executing program 1 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2) 1m6.345469742s ago: executing program 1 (id=30): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x4, {0x2, 0x0, 0x6, 0x19}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008080) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x0, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800080, 0x848, 0x1, 0x9, 0x1, 0xf9}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)='c*', 0x100000}], 0x1, 0x0, 0x0, 0x4090}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x1, 0x0, 0x4000) 1m4.840616422s ago: executing program 32 (id=18): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 1m4.302875949s ago: executing program 1 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xcdc26000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x202, 0x200, '@\x00V', 0x1, 0xdf}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000300)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m0.965602604s ago: executing program 1 (id=36): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0xfffffffe, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x25a1, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x400c844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000003c0)={@none, 0x8, 0xd2, 0x8, 0x8, 0x9, "04ac0e1537f1b0d0faea18fc6f5eafe74143b16fdc71518eaad3e6f8cc76edeee6139d545adfca83f1c0f8c1f98d61d8014e063b1b4107cf7d810dc969465361432c18135e9ded8828df37e532408cb28f2ebf96c4e0ab18a1e2a2781bc77abd44f15b80c41c3a9a94fd89eacf400f4cf09d34d5d57b57fd0f307a95b5ddeedd"}) socket$inet_udp(0x2, 0x2, 0x0) write(r1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 52.801066826s ago: executing program 33 (id=27): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 48.97741372s ago: executing program 1 (id=46): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0), 0x2) 46.495465957s ago: executing program 1 (id=48): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 22.554490542s ago: executing program 34 (id=48): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 12.805799549s ago: executing program 4 (id=61): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd69a2f78c25132c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) 11.583971098s ago: executing program 4 (id=63): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, 0x0, 0x2) 9.953714521s ago: executing program 4 (id=64): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f0000000040)) 8.072982795s ago: executing program 0 (id=66): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0), 0x2) 6.284798093s ago: executing program 0 (id=67): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd69a2f78c25132c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) 4.872059537s ago: executing program 4 (id=68): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 4.069028895s ago: executing program 0 (id=69): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1) r2 = syz_open_dev$dri(0x0, 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x4000400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 2.852273653s ago: executing program 4 (id=70): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd69a2f78c25132c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x76, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) 2.808321408s ago: executing program 0 (id=71): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) 1.054271507s ago: executing program 0 (id=72): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) 1.009999119s ago: executing program 4 (id=73): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000100), &(0x7f0000000240)=@v3={0x3000000, [{0x8, 0x7}, {0x6, 0x7}]}, 0x18, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0x5}], 0x8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 0s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x76, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 87.200588][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 90.551260][ T5794] cgroup: Unknown subsys name 'net' [ 90.782656][ T5794] cgroup: Unknown subsys name 'cpuset' [ 90.816449][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.826932][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.587316][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.589339][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.590117][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.591624][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.592487][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.656820][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.663184][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.663964][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.668340][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.668851][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.676914][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.678230][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.679034][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.687728][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.688657][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.814320][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.823283][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.824166][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.840472][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.841356][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.930377][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.933311][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.934507][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.966465][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.967367][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.753281][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 96.763522][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 96.967459][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 97.105321][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 97.677216][ T5119] Bluetooth: hci0: command tx timeout [ 97.744952][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.746679][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.747248][ T5807] bridge_slave_0: entered allmulticast mode [ 97.750286][ T5807] bridge_slave_0: entered promiscuous mode [ 97.756448][ T5809] Bluetooth: hci1: command tx timeout [ 97.756632][ T5119] Bluetooth: hci2: command tx timeout [ 97.766307][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 97.803094][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.803186][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.803309][ T5804] bridge_slave_0: entered allmulticast mode [ 97.805017][ T5804] bridge_slave_0: entered promiscuous mode [ 97.822946][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.823097][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.823281][ T5807] bridge_slave_1: entered allmulticast mode [ 97.828274][ T5807] bridge_slave_1: entered promiscuous mode [ 97.946836][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.946980][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.947095][ T5804] bridge_slave_1: entered allmulticast mode [ 97.948847][ T5804] bridge_slave_1: entered promiscuous mode [ 97.996107][ T5809] Bluetooth: hci3: command tx timeout [ 97.996293][ T5119] Bluetooth: hci4: command tx timeout [ 98.477027][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.477937][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.478095][ T5808] bridge_slave_0: entered allmulticast mode [ 98.479841][ T5808] bridge_slave_0: entered promiscuous mode [ 98.652050][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.661344][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.661481][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.661650][ T5808] bridge_slave_1: entered allmulticast mode [ 98.664684][ T5808] bridge_slave_1: entered promiscuous mode [ 98.672559][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.673956][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.674121][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.674291][ T5814] bridge_slave_0: entered allmulticast mode [ 98.678789][ T5814] bridge_slave_0: entered promiscuous mode [ 98.687025][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.828999][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.829255][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.829376][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.829492][ T5814] bridge_slave_1: entered allmulticast mode [ 98.831217][ T5814] bridge_slave_1: entered promiscuous mode [ 99.411547][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.549807][ T5807] team0: Port device team_slave_0 added [ 99.629877][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.631880][ T5804] team0: Port device team_slave_0 added [ 99.636249][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.639763][ T5807] team0: Port device team_slave_1 added [ 99.640616][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.640757][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.640957][ T5816] bridge_slave_0: entered allmulticast mode [ 99.644246][ T5816] bridge_slave_0: entered promiscuous mode [ 99.756034][ T5119] Bluetooth: hci0: command tx timeout [ 99.770716][ T5804] team0: Port device team_slave_1 added [ 99.774601][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.846085][ T5119] Bluetooth: hci2: command tx timeout [ 99.846131][ T5119] Bluetooth: hci1: command tx timeout [ 99.867846][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.868013][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.868153][ T5816] bridge_slave_1: entered allmulticast mode [ 99.869912][ T5816] bridge_slave_1: entered promiscuous mode [ 100.075996][ T5809] Bluetooth: hci3: command tx timeout [ 100.076044][ T5809] Bluetooth: hci4: command tx timeout [ 100.468887][ T5808] team0: Port device team_slave_0 added [ 100.598503][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.598519][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.598535][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.679052][ T5808] team0: Port device team_slave_1 added [ 100.683567][ T5814] team0: Port device team_slave_0 added [ 100.685256][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.685270][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.685297][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.690675][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.690690][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.690716][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.697423][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.797091][ T5814] team0: Port device team_slave_1 added [ 100.798140][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.798151][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.798168][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.813233][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.039328][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.039344][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.039363][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.178886][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.178900][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.178917][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.179998][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.180011][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.180026][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.183145][ T5816] team0: Port device team_slave_0 added [ 101.294412][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.294425][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.294442][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.368979][ T5816] team0: Port device team_slave_1 added [ 101.744736][ T5807] hsr_slave_0: entered promiscuous mode [ 101.747545][ T5807] hsr_slave_1: entered promiscuous mode [ 101.762390][ T5804] hsr_slave_0: entered promiscuous mode [ 101.763359][ T5804] hsr_slave_1: entered promiscuous mode [ 101.764107][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 101.764189][ T5804] Cannot create hsr debugfs directory [ 101.837521][ T5809] Bluetooth: hci0: command tx timeout [ 101.899843][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.899859][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.899875][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.920981][ T5809] Bluetooth: hci2: command tx timeout [ 101.920989][ T5119] Bluetooth: hci1: command tx timeout [ 102.079431][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.079445][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.079462][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.156171][ T5119] Bluetooth: hci4: command tx timeout [ 102.156225][ T5119] Bluetooth: hci3: command tx timeout [ 102.183598][ T5808] hsr_slave_0: entered promiscuous mode [ 102.184510][ T5808] hsr_slave_1: entered promiscuous mode [ 102.185142][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 102.185161][ T5808] Cannot create hsr debugfs directory [ 102.340771][ T5814] hsr_slave_0: entered promiscuous mode [ 102.342354][ T5814] hsr_slave_1: entered promiscuous mode [ 102.343468][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 102.343496][ T5814] Cannot create hsr debugfs directory [ 103.106469][ T5816] hsr_slave_0: entered promiscuous mode [ 103.107638][ T5816] hsr_slave_1: entered promiscuous mode [ 103.108257][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 103.108275][ T5816] Cannot create hsr debugfs directory [ 103.916704][ T5119] Bluetooth: hci0: command tx timeout [ 103.996053][ T5119] Bluetooth: hci1: command tx timeout [ 103.996070][ T5809] Bluetooth: hci2: command tx timeout [ 104.131711][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.164201][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.201594][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.235980][ T5809] Bluetooth: hci3: command tx timeout [ 104.236091][ T5809] Bluetooth: hci4: command tx timeout [ 104.257637][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.363045][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.422866][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.453229][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.503832][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.630386][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.655673][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.697095][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.758496][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.907398][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.957580][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.004870][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.062160][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.135455][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.209263][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.252222][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.302832][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.339126][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.378121][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.423504][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.424125][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.479661][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.481855][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.486181][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.584658][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.634612][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.634771][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.655309][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.679811][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.679924][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.759565][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.824463][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.832166][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.832394][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.899601][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.899773][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.989412][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.995749][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.051342][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.051517][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.113638][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.113837][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.158085][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.204192][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.204513][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.248111][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.248281][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.295439][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.619408][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.879957][ T5804] veth0_vlan: entered promiscuous mode [ 106.919073][ T5804] veth1_vlan: entered promiscuous mode [ 107.129220][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.181675][ T5804] veth0_macvtap: entered promiscuous mode [ 107.229962][ T5804] veth1_macvtap: entered promiscuous mode [ 107.294051][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.325697][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.359328][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.363328][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.411600][ T5808] veth0_vlan: entered promiscuous mode [ 107.413216][ T1102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.422632][ T1102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.440587][ T1102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.454835][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.471762][ T5807] veth0_vlan: entered promiscuous mode [ 107.480378][ T5808] veth1_vlan: entered promiscuous mode [ 107.622992][ T5807] veth1_vlan: entered promiscuous mode [ 107.742772][ T5814] veth0_vlan: entered promiscuous mode [ 107.831660][ T5814] veth1_vlan: entered promiscuous mode [ 107.835475][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.835498][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.854755][ T5816] veth0_vlan: entered promiscuous mode [ 107.883291][ T5808] veth0_macvtap: entered promiscuous mode [ 107.934204][ T5808] veth1_macvtap: entered promiscuous mode [ 107.944884][ T5816] veth1_vlan: entered promiscuous mode [ 107.970148][ T5807] veth0_macvtap: entered promiscuous mode [ 107.972741][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.972763][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.017306][ T5807] veth1_macvtap: entered promiscuous mode [ 108.061894][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.086858][ T5814] veth0_macvtap: entered promiscuous mode [ 108.092684][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.122411][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.129714][ T5814] veth1_macvtap: entered promiscuous mode [ 108.155208][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.163707][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.165214][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.169635][ T5816] veth0_macvtap: entered promiscuous mode [ 108.186301][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.194500][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.211213][ T5816] veth1_macvtap: entered promiscuous mode [ 108.214664][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.223365][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.268917][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.281569][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.290117][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.395283][ T5921] loop7: detected capacity change from 0 to 7 [ 108.412032][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.416471][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.416564][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.422014][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.422047][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.422352][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.422377][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.422636][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.422660][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.422940][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.422964][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.423245][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.423270][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.423517][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.423541][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.423628][ T5921] ldm_validate_partition_table(): Disk read failed. [ 108.423801][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.423824][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.424076][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.424100][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.424340][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.424363][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.424688][ T5921] Dev loop7: unable to read RDB block 0 [ 108.425636][ T5921] loop7: unable to read partition table [ 108.428937][ T5921] loop7: partition table beyond EOD, truncated [ 108.428980][ T5921] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 108.496584][ T5921] loop7: detected capacity change from 7 to 0 [ 108.740810][ T5923] input: syz1 as /devices/virtual/input/input5 [ 108.754154][ T1333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.770838][ T1333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.774019][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.777366][ T1333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.891995][ T1333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.957883][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.125390][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.125414][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.171780][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.204493][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.217118][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.262676][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.355868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.416680][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.416704][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.551706][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.551730][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.776004][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.776020][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.051092][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.051115][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.135591][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.135614][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.045831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.468968][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.468995][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.110482][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.110505][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.716641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.865837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.736188][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.052373][ T5877] usb 4-1: device descriptor read/all, error -71 [ 129.935836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.936074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.936155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.936235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.097211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.097488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.649871][ T6011] fuse: Bad value for 'fd' [ 139.638599][ T6032] input: syz0 as /devices/virtual/input/input11 [ 139.939057][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.939214][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.596027][ T6039] input: syz0 as /devices/virtual/input/input12 [ 150.382123][ T6080] input: syz0 as /devices/virtual/input/input13 [ 151.865170][ T6086] input: syz0 as /devices/virtual/input/input14 [ 153.470879][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.497003][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.498331][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.499673][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.501159][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.595953][ T5119] Bluetooth: hci5: command tx timeout [ 157.749129][ T5119] Bluetooth: hci5: command tx timeout [ 159.880892][ T5119] Bluetooth: hci5: command tx timeout [ 161.916093][ T5119] Bluetooth: hci5: command tx timeout [ 164.252806][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.257932][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.259024][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.281829][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.283089][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.334040][ T1504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.706324][ T6141] input: syz0 as /devices/virtual/input/input15 [ 176.324161][ T5809] Bluetooth: hci3: command tx timeout [ 179.840260][ T6149] input: syz0 as /devices/virtual/input/input16 [ 187.795863][ T5809] Bluetooth: hci3: command tx timeout [ 188.210982][ T1504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.415997][ T5119] Bluetooth: hci3: command tx timeout [ 191.490071][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.507116][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.508147][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.512844][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.514074][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.579257][ T1504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.850505][ T1504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.099489][ T5119] Bluetooth: hci3: command tx timeout [ 193.596353][ T5119] Bluetooth: hci0: command tx timeout [ 194.773992][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 195.668794][ T6195] input: syz0 as /devices/virtual/input/input17 [ 195.991966][ T5119] Bluetooth: hci0: command tx timeout [ 196.226220][ T1504] bridge_slave_1: left allmulticast mode [ 196.226407][ T1504] bridge_slave_1: left promiscuous mode [ 196.232085][ T1504] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.373018][ T1504] bridge_slave_0: left allmulticast mode [ 196.373052][ T1504] bridge_slave_0: left promiscuous mode [ 196.373341][ T1504] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.995856][ T5119] Bluetooth: hci0: command tx timeout [ 200.753092][ T5119] Bluetooth: hci0: command tx timeout [ 204.974208][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.974263][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.308879][ T1504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.389603][ T1504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.441851][ T1504] bond0 (unregistering): Released all slaves [ 207.060968][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.081022][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.082211][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.084026][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.085032][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.558222][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 209.699942][ T5809] Bluetooth: hci2: command tx timeout [ 209.858513][ T6265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.314803][ T5809] Bluetooth: hci2: command tx timeout [ 212.327365][ T5890] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 212.327390][ T5890] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 212.327413][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.327436][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.327448][ T5890] Workqueue: events l2cap_info_timeout [ 212.327481][ T5890] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 212.327514][ T5890] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 cf a3 08 cc 66 66 66 66 66 66 2e [ 212.327531][ T5890] RSP: 0018:ffffc900050ef788 EFLAGS: 00010202 [ 212.327547][ T5890] RAX: dffffc0000000000 RBX: ffffffff889ce60e RCX: 95e702a3076c1f00 [ 212.327562][ T5890] RDX: 0000000000000000 RSI: ffffffff889ce60e RDI: 000000000000006b [ 212.327575][ T5890] RBP: ffffffff89ca1f15 R08: 0000000000000001 R09: 0000000000000000 [ 212.327588][ T5890] R10: dffffc0000000000 R11: ffffffff89ca1ed0 R12: 0000000000000000 [ 212.327602][ T5890] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 212.327615][ T5890] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 212.327631][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.327645][ T5890] CR2: 00007ffc8cec5fa8 CR3: 000000003cb9e000 CR4: 00000000003526f0 [ 212.327664][ T5890] Call Trace: [ 212.327672][ T5890] [ 212.327680][ T5890] __kasan_check_byte+0x12/0x40 [ 212.327708][ T5890] lock_acquire+0x8d/0x360 [ 212.327735][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.327764][ T5890] ? __cancel_work+0x254/0x2e0 [ 212.327795][ T5890] lock_sock_nested+0x3e/0x130 [ 212.327824][ T5890] ? l2cap_sock_ready_cb+0x45/0x140 [ 212.327844][ T5890] l2cap_sock_ready_cb+0x45/0x140 [ 212.327864][ T5890] l2cap_conn_start+0x76d/0xe50 [ 212.327893][ T5890] ? __pfx_l2cap_conn_start+0x10/0x10 [ 212.327917][ T5890] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 212.327943][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.327969][ T5890] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 212.327996][ T5890] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 212.328026][ T5890] ? mutex_lock_nested+0x154/0x1d0 [ 212.328048][ T5890] ? l2cap_info_timeout+0x60/0xa0 [ 212.328072][ T5890] l2cap_info_timeout+0x68/0xa0 [ 212.328095][ T5890] ? process_scheduled_works+0x9ef/0x17b0 [ 212.328114][ T5890] process_scheduled_works+0xae1/0x17b0 [ 212.328142][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 212.328167][ T5890] worker_thread+0x8a0/0xda0 [ 212.328195][ T5890] kthread+0x711/0x8a0 [ 212.328219][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 212.328239][ T5890] ? __pfx_kthread+0x10/0x10 [ 212.328261][ T5890] ? rt_spin_unlock+0x150/0x200 [ 212.328280][ T5890] ? rt_spin_unlock+0x161/0x200 [ 212.328297][ T5890] ? __pfx_kthread+0x10/0x10 [ 212.328329][ T5890] ret_from_fork+0x4bc/0x870 [ 212.328349][ T5890] ? __pfx_ret_from_fork+0x10/0x10 [ 212.328369][ T5890] ? __switch_to_asm+0x39/0x70 [ 212.328386][ T5890] ? __switch_to_asm+0x33/0x70 [ 212.328402][ T5890] ? __pfx_kthread+0x10/0x10 [ 212.328425][ T5890] ret_from_fork_asm+0x1a/0x30 [ 212.328447][ T5890] [ 212.328453][ T5890] Modules linked in: [ 212.328474][ T5890] ---[ end trace 0000000000000000 ]--- [ 212.331251][ T5890] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 212.331290][ T5890] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 cf a3 08 cc 66 66 66 66 66 66 2e [ 212.331308][ T5890] RSP: 0018:ffffc900050ef788 EFLAGS: 00010202 [ 212.331336][ T5890] RAX: dffffc0000000000 RBX: ffffffff889ce60e RCX: 95e702a3076c1f00 [ 212.331353][ T5890] RDX: 0000000000000000 RSI: ffffffff889ce60e RDI: 000000000000006b [ 212.331367][ T5890] RBP: ffffffff89ca1f15 R08: 0000000000000001 R09: 0000000000000000 [ 212.331381][ T5890] R10: dffffc0000000000 R11: ffffffff89ca1ed0 R12: 0000000000000000 [ 212.331395][ T5890] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 212.331409][ T5890] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 212.331426][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.331441][ T5890] CR2: 00007ffc8cec5fa8 CR3: 000000003cb9e000 CR4: 00000000003526f0 [ 212.331463][ T5890] Kernel panic - not syncing: Fatal exception [ 212.331722][ T5890] Kernel Offset: disabled