last executing test programs: 27.418845976s ago: executing program 4 (id=40): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 25.138406915s ago: executing program 4 (id=43): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60642, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 23.31094873s ago: executing program 4 (id=46): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "4ca4625e00b5aa95a443d782d859cb2df816a3bc9bd3bf1d11d8b4a7ba9fc6dfb72a8a253215874b349abc806123fd11b1d23eb79cf0385a4cd7b494621f0b26b593bbccdfdf13dbc79be9e9f18b5fb46b9d5a74d7a6dd151c0f37b9e89825f2f99217fb0091568ce14c98b5b462555908260a0e7c7c33fc1ba12df6d0d8fc11847c4b29bd4752fa53802767e26e11475a905215a4d1cfb8a8cc88d605e68145d97c3c2836b7935b66b3583d6633efe51a9cb5426092d85d47a8ca52fe5b7c2083596186c5b4e98f1052759d2233c3fb1e62e4333f0898f89b770b6abe57c92ba6f0e1c64a714686c6f22f7c8f6f79ee56c56d09e95001654229a197d0462e6f", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}}}, 0x120) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, 0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 22.441978143s ago: executing program 2 (id=48): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x7b9, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 17.936893435s ago: executing program 3 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180)) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800800, &(0x7f0000000440)={[{@xattr}, {@subsystem='memory'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='cpu'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@noprefix}, {@subsystem='cpuacct'}, {@nofavordynmods}, {}], [{@fowner_gt}, {@measure}, {@subj_role}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x2000, r3}, 0x38) 16.521426697s ago: executing program 4 (id=55): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) readlink(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 15.237746531s ago: executing program 3 (id=56): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.229048444s ago: executing program 4 (id=57): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 15.06564457s ago: executing program 3 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) dup(0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000440)=0xfffffffffffffee7) syz_open_dev$video4linux(&(0x7f0000000040), 0xff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3cd400, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, 0x0) io_setup(0xd, &(0x7f0000000380)) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd60ff690b00482f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000800301ff000b00000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000d0000000000000000080065580000"], 0x0) 13.320709125s ago: executing program 4 (id=59): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 12.253378375s ago: executing program 3 (id=60): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x40, 0xc, 0x1, "82"}, 0x0, 0x0}) 11.926837734s ago: executing program 0 (id=61): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x8008b70d, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r3, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11.189652221s ago: executing program 1 (id=62): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x7b9, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 11.106845295s ago: executing program 0 (id=63): fsopen(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080001}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x8500, 0x0) getpeername$unix(r1, &(0x7f0000000400)=@abs, &(0x7f0000000280)=0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r2, 0x1) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x13c}, &(0x7f0000000340), &(0x7f0000000480)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, 0x0) 10.165600888s ago: executing program 2 (id=64): unshare(0x20060400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 10.023289303s ago: executing program 1 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4048aecb, &(0x7f00000034c0)) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) 8.273809015s ago: executing program 2 (id=66): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 8.090427218s ago: executing program 3 (id=67): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 8.03630424s ago: executing program 1 (id=68): ioperm(0x2, 0x7ff, 0x8) ioperm(0x9, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x4000280) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) 8.007382198s ago: executing program 0 (id=69): ioperm(0x2, 0x7ff, 0x8) ioperm(0x9, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) 7.841676308s ago: executing program 2 (id=70): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) readlink(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 5.422624402s ago: executing program 0 (id=71): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\xf56\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xae\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001004, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 5.421772742s ago: executing program 3 (id=72): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) readlink(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 4.260915893s ago: executing program 1 (id=73): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) readlink(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 3.034661343s ago: executing program 0 (id=74): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x8008b70d, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r3, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.645720326s ago: executing program 2 (id=75): unshare(0x20060400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 1.508636629s ago: executing program 1 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x81, "26da813f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x4004510d, &(0x7f0000000000)) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x200000000000000, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x235, 0x0, 0x2, 0x11, 0x2}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x4, 0xffffff71, 0x3, 0xffffffffffffffff, 0x0, 0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000140)={{@any, 0x7}, 0x5, 0x0, 0x5, 0xff}) mremap(&(0x7f0000324000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) statfs(0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002600)={0x10000011}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) 399.312817ms ago: executing program 0 (id=77): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 257.750878ms ago: executing program 1 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) mount$9p_virtio(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=79): syz_open_dev$vcsa(&(0x7f0000002900), 0x1, 0x40000) syz_genetlink_get_family_id$smc(&(0x7f0000002980), 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 68.738503][ T5778] cgroup: Unknown subsys name 'net' [ 68.979295][ T5778] cgroup: Unknown subsys name 'cpuset' [ 69.036081][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.607936][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.313135][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313186][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.825420][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.827971][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.828691][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.829876][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.833874][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.838964][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.839861][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.843569][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.846053][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.847192][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.848436][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.848705][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.849139][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.849856][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.850425][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.851134][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.854252][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.855309][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.855584][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.857706][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.860441][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.869788][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.871744][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.883818][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.902710][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.697869][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 73.717606][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 73.800608][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 73.820071][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 73.885693][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 74.042501][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.043378][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.043706][ T5800] bridge_slave_0: entered allmulticast mode [ 74.045967][ T5800] bridge_slave_0: entered promiscuous mode [ 74.083280][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.083362][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.083983][ T5799] bridge_slave_0: entered allmulticast mode [ 74.105578][ T5799] bridge_slave_0: entered promiscuous mode [ 74.122513][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.122635][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.122793][ T5800] bridge_slave_1: entered allmulticast mode [ 74.124125][ T5800] bridge_slave_1: entered promiscuous mode [ 74.163490][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.163617][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.163711][ T5799] bridge_slave_1: entered allmulticast mode [ 74.165800][ T5799] bridge_slave_1: entered promiscuous mode [ 74.226353][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.226471][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.226561][ T5796] bridge_slave_0: entered allmulticast mode [ 74.227836][ T5796] bridge_slave_0: entered promiscuous mode [ 74.277999][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.278108][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.278220][ T5798] bridge_slave_0: entered allmulticast mode [ 74.279501][ T5798] bridge_slave_0: entered promiscuous mode [ 74.281423][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.281555][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.282022][ T5796] bridge_slave_1: entered allmulticast mode [ 74.283461][ T5796] bridge_slave_1: entered promiscuous mode [ 74.330105][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.349588][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.349703][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.349858][ T5798] bridge_slave_1: entered allmulticast mode [ 74.351514][ T5798] bridge_slave_1: entered promiscuous mode [ 74.375601][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.378353][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.380083][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.380219][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.380370][ T5797] bridge_slave_0: entered allmulticast mode [ 74.382988][ T5797] bridge_slave_0: entered promiscuous mode [ 74.427396][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.447595][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.447674][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.447774][ T5797] bridge_slave_1: entered allmulticast mode [ 74.449090][ T5797] bridge_slave_1: entered promiscuous mode [ 74.489321][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.528228][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.530351][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.727377][ T5800] team0: Port device team_slave_0 added [ 74.744340][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.760820][ T5799] team0: Port device team_slave_0 added [ 74.762764][ T5800] team0: Port device team_slave_1 added [ 74.766136][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.798036][ T5799] team0: Port device team_slave_1 added [ 74.817741][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.832555][ T5796] team0: Port device team_slave_0 added [ 74.869714][ T5798] team0: Port device team_slave_0 added [ 74.871489][ T5796] team0: Port device team_slave_1 added [ 74.893764][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.893774][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.893787][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.906003][ T5814] Bluetooth: hci0: command tx timeout [ 74.928787][ T5798] team0: Port device team_slave_1 added [ 74.955276][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.955290][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.955308][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.959307][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.959322][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.959337][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.961193][ T5797] team0: Port device team_slave_0 added [ 74.985932][ T5814] Bluetooth: hci3: command tx timeout [ 74.986036][ T5814] Bluetooth: hci2: command tx timeout [ 74.995301][ T61] Bluetooth: hci1: command tx timeout [ 74.995424][ T61] Bluetooth: hci4: command tx timeout [ 74.999794][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.999807][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.999837][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.017900][ T5797] team0: Port device team_slave_1 added [ 75.037349][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.037366][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.037389][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.072157][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.072173][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.072196][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.074430][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.074442][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.074466][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.100346][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.100362][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.100385][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.136617][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.136633][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.136656][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.190065][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.190082][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.190106][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.222991][ T5800] hsr_slave_0: entered promiscuous mode [ 75.224469][ T5800] hsr_slave_1: entered promiscuous mode [ 75.268703][ T5799] hsr_slave_0: entered promiscuous mode [ 75.269937][ T5799] hsr_slave_1: entered promiscuous mode [ 75.270918][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 75.271029][ T5799] Cannot create hsr debugfs directory [ 75.368574][ T5796] hsr_slave_0: entered promiscuous mode [ 75.369808][ T5796] hsr_slave_1: entered promiscuous mode [ 75.370697][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 75.370719][ T5796] Cannot create hsr debugfs directory [ 75.381706][ T5798] hsr_slave_0: entered promiscuous mode [ 75.382867][ T5798] hsr_slave_1: entered promiscuous mode [ 75.383808][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 75.383829][ T5798] Cannot create hsr debugfs directory [ 75.484275][ T5797] hsr_slave_0: entered promiscuous mode [ 75.486685][ T5797] hsr_slave_1: entered promiscuous mode [ 75.487526][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 75.487547][ T5797] Cannot create hsr debugfs directory [ 76.458601][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.483069][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.519162][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.569103][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.670645][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.702334][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.719105][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.773559][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.877078][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.928542][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.972802][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.985150][ T5814] Bluetooth: hci0: command tx timeout [ 77.003971][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.066475][ T5814] Bluetooth: hci4: command tx timeout [ 77.066504][ T5814] Bluetooth: hci1: command tx timeout [ 77.066524][ T5814] Bluetooth: hci2: command tx timeout [ 77.066543][ T5814] Bluetooth: hci3: command tx timeout [ 77.126038][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.183223][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.213723][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.250256][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.370997][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.372695][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.422187][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.463697][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.508637][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.588974][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.612308][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.632547][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.633666][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.671765][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.671998][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.720898][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.740936][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.762477][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.762612][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.806979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.807152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.852439][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.882746][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.882890][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.898257][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.919938][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.920583][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.023201][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.057437][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.074479][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.074555][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.128356][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.129201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.181014][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.242874][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.243487][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.291038][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.291112][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.381081][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.574619][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.647352][ T5800] veth0_vlan: entered promiscuous mode [ 78.721290][ T5800] veth1_vlan: entered promiscuous mode [ 78.791546][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.884611][ T5799] veth0_vlan: entered promiscuous mode [ 78.923638][ T5800] veth0_macvtap: entered promiscuous mode [ 78.942995][ T5799] veth1_vlan: entered promiscuous mode [ 78.949432][ T5800] veth1_macvtap: entered promiscuous mode [ 78.979381][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.982811][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.028053][ T5798] veth0_vlan: entered promiscuous mode [ 79.041285][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.065176][ T61] Bluetooth: hci0: command tx timeout [ 79.073461][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.106736][ T5798] veth1_vlan: entered promiscuous mode [ 79.144482][ T3889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.155597][ T61] Bluetooth: hci3: command tx timeout [ 79.155624][ T61] Bluetooth: hci2: command tx timeout [ 79.155643][ T61] Bluetooth: hci1: command tx timeout [ 79.155662][ T61] Bluetooth: hci4: command tx timeout [ 79.183272][ T3889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.201384][ T5799] veth0_macvtap: entered promiscuous mode [ 79.202491][ T3889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.222255][ T3889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.271047][ T5799] veth1_macvtap: entered promiscuous mode [ 79.450966][ T5796] veth0_vlan: entered promiscuous mode [ 79.477812][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.502300][ T5798] veth0_macvtap: entered promiscuous mode [ 79.519165][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.523861][ T5796] veth1_vlan: entered promiscuous mode [ 79.554602][ T5798] veth1_macvtap: entered promiscuous mode [ 79.579846][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.582886][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.582907][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.621411][ T3889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.639061][ T3889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.655798][ T3889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.730987][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.745577][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.745597][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.746829][ T5797] veth0_vlan: entered promiscuous mode [ 79.821080][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.929765][ T3535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.933307][ T5797] veth1_vlan: entered promiscuous mode [ 79.934737][ T3535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.937956][ T5796] veth0_macvtap: entered promiscuous mode [ 79.963614][ T3535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.981126][ T3535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.023510][ T5796] veth1_macvtap: entered promiscuous mode [ 80.075503][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.075522][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.977808][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.977826][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.117142][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.145086][ T5814] Bluetooth: hci0: command tx timeout [ 81.188033][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.193902][ T5797] veth0_macvtap: entered promiscuous mode [ 81.220910][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.221252][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.226163][ T5810] Bluetooth: hci2: command tx timeout [ 81.228032][ T5810] Bluetooth: hci3: command tx timeout [ 81.235219][ T61] Bluetooth: hci1: command tx timeout [ 81.236262][ T5814] Bluetooth: hci4: command tx timeout [ 81.504888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 81.695754][ T10] cfg80211: failed to load regulatory.db [ 81.960443][ T5797] veth1_macvtap: entered promiscuous mode [ 81.977364][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038266][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.040989][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.102888][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.139074][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.139093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.206825][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.374907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.384896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.394878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.404875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.414883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.424875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.434874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.475306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.476179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.548864][ T5927] ALSA: mixer_oss: invalid OSS volume '' [ 83.642233][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.961281][ T5933] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9'. [ 86.045309][ T159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.058370][ T159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.060367][ T159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.077575][ T159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.484561][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.484580][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.511254][ T5951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13'. [ 89.676105][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.676155][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.220891][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.220910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.898380][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.898394][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.370527][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.326256][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.330177][ T6010] batadv_slave_0: entered promiscuous mode [ 101.481773][ T6019] capability: warning: `syz.4.29' uses 32-bit capabilities (legacy support in use) [ 102.336532][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.465077][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 103.489720][ T808] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.489747][ T808] usb 2-1: config 0 has no interface number 0 [ 103.527111][ T808] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 103.527140][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.527158][ T808] usb 2-1: Product: syz [ 103.527172][ T808] usb 2-1: Manufacturer: syz [ 103.527187][ T808] usb 2-1: SerialNumber: syz [ 104.251792][ T808] usb 2-1: config 0 descriptor?? [ 105.128336][ T6052] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 105.251324][ T808] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 105.251364][ T808] usb 2-1: selecting invalid altsetting 1 [ 105.251382][ T808] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 105.535785][ T808] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.536588][ T808] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 105.536684][ T808] usb 2-1: media controller created [ 105.581339][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.507601][ T808] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 106.507655][ T808] zl10353_read_register: readreg error (reg=127, ret==-71) [ 106.524681][ T808] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 107.825518][ T808] usb 2-1: USB disconnect, device number 2 [ 110.353391][ T808] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.526385][ T808] usb 2-1: no configurations [ 110.526402][ T808] usb 2-1: can't read configurations, error -22 [ 111.665994][ T808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.635381][ T6100] binder: BINDER_SET_CONTEXT_MGR already set [ 112.635391][ T6100] binder: 6099:6100 ioctl 4018620d 2000000001c0 returned -16 [ 120.323265][ T6141] netlink: 34 bytes leftover after parsing attributes in process `syz.3.58'. [ 121.138639][ T5849] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.677713][ T5849] usb 4-1: no configurations [ 121.677725][ T5849] usb 4-1: can't read configurations, error -22 [ 121.855005][ T5849] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.441918][ T5849] usb 4-1: no configurations [ 122.441937][ T5849] usb 4-1: can't read configurations, error -22 [ 122.491488][ T5849] usb usb4-port1: attempt power cycle [ 123.278042][ T5849] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.309949][ T5849] usb 4-1: no configurations [ 123.309969][ T5849] usb 4-1: can't read configurations, error -22 [ 123.517460][ T5849] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.596166][ T5849] usb 4-1: no configurations [ 123.596185][ T5849] usb 4-1: can't read configurations, error -22 [ 123.597120][ T5849] usb usb4-port1: unable to enumerate USB device [ 132.845381][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845453][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.571421][ T5849] ------------[ cut here ]------------ [ 134.571435][ T5849] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 134.571453][ T5849] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:3/5849 [ 134.571501][ T5849] Modules linked in: [ 134.571539][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.571559][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 134.571574][ T5849] Workqueue: events drm_fb_helper_damage_work [ 134.571604][ T5849] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 134.571629][ T5849] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 df b5 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 134.571644][ T5849] RSP: 0000:ffffc90004d0f860 EFLAGS: 00010246 [ 134.571660][ T5849] RAX: 1ffff110283f1e00 RBX: ffffffff8f5296c0 RCX: 0000000000000000 [ 134.571673][ T5849] RDX: ffffffff8b9eacc0 RSI: ffffffff8ba06a20 RDI: ffffffff8f5296c0 [ 134.571685][ T5849] RBP: ffffc90004d0f948 R08: 0000000000000000 R09: 0000000000000000 [ 134.571697][ T5849] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffffffff8ba06a20 [ 134.571709][ T5849] R13: ffff888141f8f000 R14: 1ffff920009a1f10 R15: ffffffff8b9eacc0 [ 134.571722][ T5849] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 134.571736][ T5849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.571747][ T5849] CR2: fffffffffffffe70 CR3: 0000000030040000 CR4: 00000000003526f0 [ 134.571761][ T5849] Call Trace: [ 134.571768][ T5849] [ 134.571784][ T5849] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 134.571807][ T5849] ? rt_spin_unlock+0x14f/0x200 [ 134.571827][ T5849] ? __pfx_autoremove_wake_function+0x10/0x10 [ 134.571849][ T5849] ? rt_spin_unlock+0x160/0x200 [ 134.571871][ T5849] ? drm_vblank_get+0x147/0x260 [ 134.571897][ T5849] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 134.571922][ T5849] drm_fb_helper_damage_work+0x131/0x6f0 [ 134.571949][ T5849] ? process_scheduled_works+0xa0f/0x17a0 [ 134.571982][ T5849] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 134.572012][ T5849] ? process_scheduled_works+0xa0f/0x17a0 [ 134.572040][ T5849] ? process_scheduled_works+0xa0f/0x17a0 [ 134.572071][ T5849] process_scheduled_works+0xaec/0x17a0 [ 134.572127][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.572163][ T5849] ? do_raw_spin_lock+0x12b/0x2f0 [ 134.572194][ T5849] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.572220][ T5849] ? schedule+0x90/0x360 [ 134.572251][ T5849] worker_thread+0xda6/0x1360 [ 134.572296][ T5849] kthread+0x726/0x8b0 [ 134.572322][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 134.572341][ T5849] ? __pfx_kthread+0x10/0x10 [ 134.572360][ T5849] ? rt_spin_unlock+0x14f/0x200 [ 134.572384][ T5849] ? rt_spin_unlock+0x160/0x200 [ 134.572401][ T5849] ? __pfx_kthread+0x10/0x10 [ 134.572425][ T5849] ret_from_fork+0x51b/0xa40 [ 134.572448][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 134.572467][ T5849] ? __switch_to+0xc82/0x1410 [ 134.572498][ T5849] ? __pfx_kthread+0x10/0x10 [ 134.572523][ T5849] ret_from_fork_asm+0x1a/0x30 [ 134.572567][ T5849] [ 134.572577][ T5849] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.572591][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.572613][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 134.572624][ T5849] Workqueue: events drm_fb_helper_damage_work [ 134.572650][ T5849] Call Trace: [ 134.572657][ T5849] [ 134.572665][ T5849] vpanic+0x1e0/0x670 [ 134.572693][ T5849] panic+0xc5/0xd0 [ 134.572718][ T5849] ? __pfx_panic+0x10/0x10 [ 134.572752][ T5849] ? ret_from_fork_asm+0x1a/0x30 [ 134.572785][ T5849] __warn+0x315/0x4a0 [ 134.572808][ T5849] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 134.572835][ T5849] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 134.572861][ T5849] __report_bug+0x29a/0x540 [ 134.572891][ T5849] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 134.572917][ T5849] ? __pfx___report_bug+0x10/0x10 [ 134.572961][ T5849] report_bug_entry+0x19a/0x290 [ 134.572985][ T5849] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 134.573008][ T5849] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 134.573032][ T5849] handle_bug+0xca/0x200 [ 134.573060][ T5849] exc_invalid_op+0x1a/0x50 [ 134.573087][ T5849] asm_exc_invalid_op+0x1a/0x20 [ 134.573105][ T5849] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 134.573131][ T5849] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 df b5 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 134.573152][ T5849] RSP: 0000:ffffc90004d0f860 EFLAGS: 00010246 [ 134.573167][ T5849] RAX: 1ffff110283f1e00 RBX: ffffffff8f5296c0 RCX: 0000000000000000 [ 134.573181][ T5849] RDX: ffffffff8b9eacc0 RSI: ffffffff8ba06a20 RDI: ffffffff8f5296c0 [ 134.573195][ T5849] RBP: ffffc90004d0f948 R08: 0000000000000000 R09: 0000000000000000 [ 134.573206][ T5849] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffffffff8ba06a20 [ 134.573218][ T5849] R13: ffff888141f8f000 R14: 1ffff920009a1f10 R15: ffffffff8b9eacc0 [ 134.573253][ T5849] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 134.573275][ T5849] ? rt_spin_unlock+0x14f/0x200 [ 134.573293][ T5849] ? __pfx_autoremove_wake_function+0x10/0x10 [ 134.573315][ T5849] ? rt_spin_unlock+0x160/0x200 [ 134.573337][ T5849] ? drm_vblank_get+0x147/0x260 [ 134.573361][ T5849] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 134.573382][ T5849] drm_fb_helper_damage_work+0x131/0x6f0 [ 134.573406][ T5849] ? process_scheduled_works+0xa0f/0x17a0 [ 134.573433][ T5849] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 134.573458][ T5849] ? process_scheduled_works+0xa0f/0x17a0 [ 134.573481][ T5849] ? process_scheduled_works+0xa0f/0x17a0 [ 134.573506][ T5849] process_scheduled_works+0xaec/0x17a0 [ 134.573551][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.573574][ T5849] ? do_raw_spin_lock+0x12b/0x2f0 [ 134.573599][ T5849] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.573620][ T5849] ? schedule+0x90/0x360 [ 134.573645][ T5849] worker_thread+0xda6/0x1360 [ 134.573680][ T5849] kthread+0x726/0x8b0 [ 134.573701][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 134.573716][ T5849] ? __pfx_kthread+0x10/0x10 [ 134.573733][ T5849] ? rt_spin_unlock+0x14f/0x200 [ 134.573752][ T5849] ? rt_spin_unlock+0x160/0x200 [ 134.573766][ T5849] ? __pfx_kthread+0x10/0x10 [ 134.573785][ T5849] ret_from_fork+0x51b/0xa40 [ 134.573804][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 134.573819][ T5849] ? __switch_to+0xc82/0x1410 [ 134.573844][ T5849] ? __pfx_kthread+0x10/0x10 [ 134.573864][ T5849] ret_from_fork_asm+0x1a/0x30 [ 134.573898][ T5849] [ 134.574253][ T5849] Kernel Offset: disabled