last executing test programs: 25.928328132s ago: executing program 0 (id=339): mmap(&(0x7f0000196000/0xe000)=nil, 0xe000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, 0x0, 0x0) shutdown(r3, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x12080000) r5 = fsmount(0xffffffffffffffff, 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x1d5}], 0x4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0, 0x5c}, {&(0x7f0000000000)="87424d51f0d3548caf0b69a7ff62a4d576bcbd6d0a7473011d5187bb6580ac030a08aa9690901c4eb3c1dc117105b56d551282c6d3a3d18051a87b084da8cfe3e51a7e7cfa267fa5dc333ff630d6b1664510804291d6da0b3c8ea4afb73601da941c2f04dd8395a065438aeba812d0e466c613b93e5422e5eabd4b6f10bd21aaa2d5e7b370a164d07426a49efae9cc451171a318a0202ed8061bf4599a9ca047073016589cd57c31a007ba062242da58ddddb9f531fb0bdf55528cbbb2ac806dd62e", 0xc2}], 0x4}, 0x4040810) unlinkat(r5, &(0x7f0000000140)='./file0\x00', 0x200) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 22.960090442s ago: executing program 0 (id=342): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r0, 0x0, 0x0, 0xcfcf) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r1, 0x8, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0xc0bc5310, &(0x7f0000000000)={0x80}) syz_open_dev$loop(0x0, 0x6a, 0xc2f81) fanotify_init(0x200, 0x0) 21.884161019s ago: executing program 0 (id=343): ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000340)={0x2, "ec8f95fed2e5f3171c18fdbfed63193a969223bc52f4355f0cfa88f97b11470e8f742723f2ee1988b998cc47375d5bc98307684809a7b24f27e6a4b98ca00135222a2ceeef4618c06566c3aa026853a413bd59b1f2745c6c478c3e5b1760e73ebdd3b6ec10eeed8278d668d8cee2201403cefb7fddf66e98d0da4978e21e842b541719a5a834cd02448cb52dd8a291131ba755f12a0fda7c998f585a10899f038f94772014b60671f1c5271b4480f3ab61acd6358344ce8c8887e242a082742be1045269357554bf81480a19db88297b407fd40931832fab0a69940afa84d0eab62a61c4978ff8dd2b48a7afcb8f4f94e2cdffc3199b1bed360a0509861a8fa668871e81ea664dd62008119e9467f4cc893af4a26cf70c76d5a198aa68f8d19cee94d16fb7eaa79543276379cfe4d57f68f6b3b3ec5de92900ab8defd59b4f11a6f391b0986c64c8944b5a12d5ecf7ceefcf8ea28b789190192868b7dc9ca84adf78b8d73ba75dc4840631a863c0600e14e29285c5ce65c737f41eaadfbc686be2a6bbf5676f3a1d5e6555416b0afa18be02c4f1d398f0859ac74040017b35773ac430dfca9be118a120fc89bfccea9e7384efb6b05b9b2bc8957b08a5176c48df979bb0ae24f86067cc16aa1fa2994d1a317b2e57dcc6d5d12fe9a1f00a31d097318d06f6b4debdb63894fb3eb20390d4e3203e62443d901378b6fdb7c7e588"}) pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = syz_io_uring_setup(0x82f, &(0x7f0000000300)={0x0, 0x2, 0x40, 0x1}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) 20.633201599s ago: executing program 0 (id=344): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="823bf1a2d17059a680f393eb9084bd800e", 0x11}, {&(0x7f0000000300)="07923708b9fc4fc6fc37a379b114c0fdb9f9566665ec3a0218a4742f3edbcca01776562569311cdceec3e6f1d50e67d475409ff69c2e1e484945501965ce958e305592080284db5819edd7e95a54e55b4ea9bc6403a3aac779bd2c3d6fd836ec21944bf5995a28cddf9ceb60040ec6eafc8174656e5020882758692f7bcc531dfe79c56c5ec4c572", 0x88}, {&(0x7f00000003c0)="e55a90c2a33186a6ab8737e4d0f106dc95cf2da3ab468ce6535a1ceaeeb1790c8fb13f5be6e4e6185ac15f0b1550b063f2c1df2c4b2069195bcd805ed395f02d0bd3a5de90330377f1038378505339edc20406628c2f68a181cfd7218ed583173df8675c1849b8548fb121efd563e9a306fbff9c149505cc8ac6d175a5d3079be567a1d466dbf72b2a0c1850f39f5e3eb5a8002e9dbb4bccbca675adf74b2730bab10f1f581e8ea36b70418a4373c2bb9ac65a5c01986d21c63370ded0f56e", 0xbf}, {&(0x7f0000000480)="d7c2863a68d8d1ab1401da89918d3bcf56d369e03fc2f44f005e71d8912356f30eb64bfe0f22ca94deb444e9f9d13765309100c5ddc251c081d3f2e29821e452c58e43ba2e61620a81b9923daaf93c300636de1097c3fc862842edc69f0ce0b84fd99452cd417563", 0x68}, {&(0x7f0000000500)="56554a48745108339a4a9e715c604207ed8af138ffe52abda4810224934912a1747441416fed5c4f3b2e900552b0c7af007b97d3cc0c16989789bd7748033cd77077e4fc0ba63915b76970e3442de1b7277c1a6371e19ce9a2e383b6d7389789727aa627832252161e882ec49a2faa22d005f4df7da8feecbc6386625b6852f0e1072585088e0b85a59ed94d5412168184edd33dd6b8fc2e72f113a1bac65c6f", 0xa0}, {&(0x7f0000000600)="b186b2e854be994d3764e7e5", 0xc}], 0x6}}], 0x2, 0x40800) 20.492513458s ago: executing program 3 (id=345): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 20.418598632s ago: executing program 1 (id=346): syz_emit_ethernet(0x10b, &(0x7f0000000240)={@empty, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x50, 0xf6, "12f9867d252ca41eb69328c88efddbec8ee01dbb7664af0e8e6adfcbf32103c32c6d3541f3b900d60c50ec562d8dd32efca09425130cb751a8c45a4b82ba2ac0d9735d190b59ec07e8dfa1f3871138caf99ea769d8c7009f3bb8d04fd594f41721eb620f530c91d8ff2638a698499620c7c8b7781cd2420026faf8e291391e9390ebd392ae9709c8b1e38e029a8f7eadeea2f029299082df4c77cdf90b3fc4a340d2d9b6a741645ee43d00df5281febabbac0cd367d4d54b938adcd38fb38cb98fee50274c630dfbbb9be2cc2745e102990557b7d7d3e7d68a2e4068363fda020416e8bc1f11b6bd803fbbfe910289729d0a3f250097"}}}}, &(0x7f0000000080)={0x0, 0x3, [0x16c, 0xdba, 0xd65, 0xe52]}) r0 = socket$inet(0x2, 0x3, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x6df26000) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x257}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x7ffc, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x47, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20.163370046s ago: executing program 0 (id=348): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x204031, 0xffffffffffffffff, 0x29d1f000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4a20, 0x0, @empty, 0x20000006}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x4]}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf25020000cdff0000010200010008000600000000000500150002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 16.024282622s ago: executing program 4 (id=350): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) close(0x3) 15.992121206s ago: executing program 0 (id=351): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x7) r4 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0xa4, 0x13, 0x53b, 0x0, 0x0, {}, [{0x90, 0x1, [@m_sample={0x60, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x9, 0x4, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xa4}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="00fea535cf568a09f81d", 0xa) 15.815288995s ago: executing program 3 (id=353): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ptrace$peek(0xffffffffffffffff, r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffff", 0xc) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 15.767895206s ago: executing program 1 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.647290207s ago: executing program 4 (id=355): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa8, 0x0, &(0x7f0000000300)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/84, 0x54, 0x0, 0x36}, @fda={0x66646185, 0xa, 0x2, 0x15}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @exit_looper], 0x6f, 0x0, &(0x7f00000003c0)="37ddd302bbe8f6463efa79dd2caf49d64de80ae7750e6dc4ee06d3727cf7bedc3ef9347884a411b86101e01a1af8200b34e555f9cba724dc76cc6a402c298e5684ce6aac654f400348c3815f7b812589f622ba5241ccd1cc53a58b271f265cd716665bc7214a0029ea682a8e3fa5b8"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x2, &(0x7f0000000280)={0x0, 0x6d08, 0x2, 0xfffffffe, 0x10d}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xb62f6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffffff, 0xf02) 14.345850677s ago: executing program 1 (id=356): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 13.999293821s ago: executing program 4 (id=357): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') lseek(r3, 0x92, 0x1) write$tun(r3, &(0x7f00000006c0)={@void, @void, @ipv4=@dccp={{0x32, 0x4, 0x3, 0x21, 0x1b2, 0x64, 0x0, 0x8e, 0x21, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x1b, 0xde, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @local]}, @noop, @timestamp_prespec={0x44, 0x24, 0x50, 0x3, 0xf, [{@private=0xa010100, 0x7}, {@remote, 0x80000001}, {@rand_addr=0x64010101, 0x200}, {@broadcast, 0x7}]}, @cipso={0x86, 0x3d, 0x0, [{0x1, 0x4, "00ea"}, {0x0, 0xe, "95099f3f5cf31c033688e8fa"}, {0x1, 0x7, "56ee0a6b5e"}, {0x5, 0x5, "45f343"}, {0x0, 0x7, "eaf9133195"}, {0x0, 0xc, "6606d3293c1df6ce02a0"}, {0x1, 0x6, "b94b27a3"}]}, @cipso={0x86, 0x37, 0x2, [{0x0, 0x6, "a0374686"}, {0x0, 0x2}, {0x5, 0x10, "8b791a526a4501df3fce215e97c4"}, {0x7, 0x2}, {0x1, 0x7, "6c5846f5ff"}, {0x7, 0x4, "8d55"}, {0x1, 0xc, "556c28f58ff4bc156d50"}]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6, "aa3ebf", 0x92, "74b0f4"}, "3f5246f59e067f9a1d3c8d5fafbd027eee7596450b6fe173e4fb8ada81b5e76b37fdf9de9b30e3a759f5ea0cb16dc6ee2579e3764ea2a326386bf8d446265c88d7c192b50b7b8365cbc5a977720e98fbb74c0660ddd0407d2b85e38a5fdc5d1a08f4dd336f209f1b7dff1fc33aadd4597c0a948f8e96542864af1c75e3c08fa063fd83187be4af4567f126d2d308c1d4fec3ac40187bed83fefc603495e4792becb343abd62580b5c561dc199ddaf13452318d92f8b555f84ac2c4ec1de432f3ed17c74c95dc9b8e029a1d253aa1d6e5b551f2a84331438e42c3"}}}, 0x1b2) r4 = fsmount(r2, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r5, &(0x7f0000000000)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x3f) 13.297147905s ago: executing program 1 (id=358): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa8, 0x0, &(0x7f0000000300)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/84, 0x54, 0x0, 0x36}, @fda={0x66646185, 0xa, 0x2, 0x15}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @exit_looper], 0x6f, 0x0, &(0x7f00000003c0)="37ddd302bbe8f6463efa79dd2caf49d64de80ae7750e6dc4ee06d3727cf7bedc3ef9347884a411b86101e01a1af8200b34e555f9cba724dc76cc6a402c298e5684ce6aac654f400348c3815f7b812589f622ba5241ccd1cc53a58b271f265cd716665bc7214a0029ea682a8e3fa5b8"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x2, &(0x7f0000000280)={0x0, 0x6d08, 0x2, 0xfffffffe, 0x10d}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xb62f6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffffff, 0xf02) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) 11.369329703s ago: executing program 2 (id=360): mmap(&(0x7f0000196000/0xe000)=nil, 0xe000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x12080000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x1d5}], 0x4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0, 0x5c}, {&(0x7f0000000000)="87424d51f0d3548caf0b69a7ff62a4d576bcbd6d0a7473011d5187bb6580ac030a08aa9690901c4eb3c1dc117105b56d551282c6d3a3d18051a87b084da8cfe3e51a7e7cfa267fa5dc333ff630d6b1664510804291d6da0b3c8ea4afb73601da941c2f04dd8395a065438aeba812d0e466c613b93e5422e5eabd4b6f10bd21aaa2d5e7b370a164d07426a49efae9cc451171a318a0202ed8061bf4599a9ca047073016589cd57c31a007ba062242da58ddddb9f531fb0bdf55528cbbb2ac806dd62e", 0xc2}], 0x4}, 0x4040810) unlinkat(r5, &(0x7f0000000140)='./file0\x00', 0x200) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 9.912982177s ago: executing program 2 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xf40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xac}}, 0x0) 8.837632923s ago: executing program 2 (id=362): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0)) signalfd4(r5, &(0x7f0000000240)={[0xb]}, 0x8, 0x80000) 8.439453488s ago: executing program 1 (id=363): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 7.619436878s ago: executing program 4 (id=364): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x204031, 0xffffffffffffffff, 0x29d1f000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4a20, 0x0, @empty, 0x20000006}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x4]}, 0x20) inotify_init1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8910, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) socket$nl_route(0x10, 0x3, 0x0) 7.388775764s ago: executing program 2 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0x10, 0x1, 0x51}], 0x10}}], 0x1, 0x20000081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f000086c000/0x3000)=nil, &(0x7f0000a71000/0x2000)=nil, &(0x7f0000e7f000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000d47000/0x1000)=nil, &(0x7f0000df9000/0x1000)=nil, &(0x7f0000fd3000/0x1000)=nil, &(0x7f0000000200)="a840b230b59195eb70c8e8857d040057596c3f05db0afc61256d6bf73ed231aa7cae465416af8432efc7b3ccdf88c30015e565fc6f8e912387ecbae56f1476ddc9bed81ed190e83f0412041ef0af444ae864ee4fad57d8ea38477bbc8bb25ee105b4056029a0fa0c4d146d88b7faaac0884a6171d2d116be5caaa2c66e50f4e6379390eb02a5624acacca0547fa8ae65dace62571f31644515b08e63c9498317a3262953", 0xa4, r1}, 0x68) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newspdinfo={0x24, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_io_uring_setup(0x239, 0x0, &(0x7f00000000c0), &(0x7f0000000340)) select(0x40, &(0x7f0000000680)={0x7, 0x800, 0x80, 0x6, 0xfffffffffffffffb, 0x34, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0x1, 0xac, 0xed6f, 0xe21}, &(0x7f0000000740)={0x0, 0xea60}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) 5.910187959s ago: executing program 3 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xa}}, 0x14}}, 0x20008080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x108, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(r7, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 4.69539618s ago: executing program 4 (id=367): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa8, 0x0, &(0x7f0000000300)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/84, 0x54, 0x0, 0x36}, @fda={0x66646185, 0xa, 0x2, 0x15}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @exit_looper], 0x6f, 0x0, &(0x7f00000003c0)="37ddd302bbe8f6463efa79dd2caf49d64de80ae7750e6dc4ee06d3727cf7bedc3ef9347884a411b86101e01a1af8200b34e555f9cba724dc76cc6a402c298e5684ce6aac654f400348c3815f7b812589f622ba5241ccd1cc53a58b271f265cd716665bc7214a0029ea682a8e3fa5b8"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xb62f6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffffff, 0xf02) 4.460603758s ago: executing program 3 (id=368): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4.361316208s ago: executing program 2 (id=369): mmap(&(0x7f0000196000/0xe000)=nil, 0xe000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, 0x0, 0x0) shutdown(r3, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x12080000) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x1d5}], 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0, 0x5c}, {&(0x7f0000000000)="87424d51f0d3548caf0b69a7ff62a4d576bcbd6d0a7473011d5187bb6580ac030a08aa9690901c4eb3c1dc117105b56d551282c6d3a3d18051a87b084da8cfe3e51a7e7cfa267fa5dc333ff630d6b1664510804291d6da0b3c8ea4afb73601da941c2f04dd8395a065438aeba812d0e466c613b93e5422e5eabd4b6f10bd21aaa2d5e7b370a164d07426a49efae9cc451171a318a0202ed8061bf4599a9ca047073016589cd57c31a007ba062242da58ddddb9f531fb0bdf55528cbbb2ac806dd62e", 0xc2}], 0x4}, 0x4040810) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 4.203534247s ago: executing program 3 (id=370): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f00000001c0)) 4.062512232s ago: executing program 1 (id=371): syz_usb_connect(0x2, 0x3e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x1a5}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x15, 0x0, r0, 0x0, 0x0, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.127542626s ago: executing program 2 (id=372): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.951789211s ago: executing program 3 (id=373): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa8, 0x0, &(0x7f0000000300)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/84, 0x54, 0x0, 0x36}, @fda={0x66646185, 0xa, 0x2, 0x15}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @exit_looper], 0x6f, 0x0, &(0x7f00000003c0)="37ddd302bbe8f6463efa79dd2caf49d64de80ae7750e6dc4ee06d3727cf7bedc3ef9347884a411b86101e01a1af8200b34e555f9cba724dc76cc6a402c298e5684ce6aac654f400348c3815f7b812589f622ba5241ccd1cc53a58b271f265cd716665bc7214a0029ea682a8e3fa5b8"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x2, &(0x7f0000000280)={0x0, 0x6d08, 0x2, 0xfffffffe, 0x10d}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xb62f6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffffff, 0xf02) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) 8.929634ms ago: executing program 32 (id=351): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x7) r4 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0xa4, 0x13, 0x53b, 0x0, 0x0, {}, [{0x90, 0x1, [@m_sample={0x60, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x9, 0x4, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xa4}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="00fea535cf568a09f81d", 0xa) 0s ago: executing program 4 (id=375): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 79.854630][ T5785] cgroup: Unknown subsys name 'net' [ 80.096977][ T5785] cgroup: Unknown subsys name 'cpuset' [ 80.152000][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.872017][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.498102][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.517104][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.533269][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.535268][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.535774][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.536485][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.537090][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.540219][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.540218][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.542760][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.548160][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.549773][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.550219][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.551416][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.553344][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.554463][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.556762][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.562053][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.563444][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.570861][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.575176][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.613666][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.657808][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.659861][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.661402][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.506014][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 86.537990][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 86.617737][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 86.626463][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 86.675803][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 86.870353][ T993] cfg80211: failed to load regulatory.db [ 86.902002][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.903222][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.904641][ T5810] bridge_slave_0: entered allmulticast mode [ 86.906254][ T5810] bridge_slave_0: entered promiscuous mode [ 86.930957][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.931077][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.931282][ T5803] bridge_slave_0: entered allmulticast mode [ 86.934093][ T5803] bridge_slave_0: entered promiscuous mode [ 86.984864][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.984973][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.985460][ T5803] bridge_slave_1: entered allmulticast mode [ 86.987652][ T5803] bridge_slave_1: entered promiscuous mode [ 87.027208][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.027383][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.027539][ T5810] bridge_slave_1: entered allmulticast mode [ 87.029653][ T5810] bridge_slave_1: entered promiscuous mode [ 87.080510][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.088694][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.088842][ T5804] bridge_slave_0: entered allmulticast mode [ 87.090250][ T5804] bridge_slave_0: entered promiscuous mode [ 87.123304][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.123417][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.123695][ T5813] bridge_slave_0: entered allmulticast mode [ 87.125078][ T5813] bridge_slave_0: entered promiscuous mode [ 87.168518][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.168652][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.168803][ T5804] bridge_slave_1: entered allmulticast mode [ 87.170570][ T5804] bridge_slave_1: entered promiscuous mode [ 87.209920][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.210060][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.210217][ T5813] bridge_slave_1: entered allmulticast mode [ 87.214448][ T5813] bridge_slave_1: entered promiscuous mode [ 87.216114][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.216226][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.216654][ T5812] bridge_slave_0: entered allmulticast mode [ 87.218990][ T5812] bridge_slave_0: entered promiscuous mode [ 87.230338][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.255087][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.285268][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.285343][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.285480][ T5812] bridge_slave_1: entered allmulticast mode [ 87.286815][ T5812] bridge_slave_1: entered promiscuous mode [ 87.302898][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.325647][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.504891][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.522509][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.549379][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.561160][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.575562][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.578951][ T5803] team0: Port device team_slave_0 added [ 87.613366][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.614954][ T5810] team0: Port device team_slave_0 added [ 87.616899][ T5803] team0: Port device team_slave_1 added [ 87.652966][ T5817] Bluetooth: hci3: command tx timeout [ 87.652970][ T5808] Bluetooth: hci0: command tx timeout [ 87.662332][ T5808] Bluetooth: hci1: command tx timeout [ 87.683166][ T5810] team0: Port device team_slave_1 added [ 87.698552][ T5804] team0: Port device team_slave_0 added [ 87.706756][ T5813] team0: Port device team_slave_0 added [ 87.731046][ T5817] Bluetooth: hci2: command tx timeout [ 87.731856][ T5808] Bluetooth: hci4: command tx timeout [ 87.764951][ T5804] team0: Port device team_slave_1 added [ 87.766560][ T5813] team0: Port device team_slave_1 added [ 87.768138][ T5812] team0: Port device team_slave_0 added [ 87.791866][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.791884][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.791907][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.829180][ T5812] team0: Port device team_slave_1 added [ 87.830442][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.830458][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.830482][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.841653][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.841669][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.841693][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.889382][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.889400][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.889424][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.925628][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.925645][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.925670][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.940092][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.940121][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.940148][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.965646][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.965664][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.965689][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.968889][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.968904][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.968927][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.004560][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.004578][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.004602][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.047050][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.047068][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.047092][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.141396][ T5803] hsr_slave_0: entered promiscuous mode [ 88.142986][ T5803] hsr_slave_1: entered promiscuous mode [ 88.154856][ T5810] hsr_slave_0: entered promiscuous mode [ 88.156184][ T5810] hsr_slave_1: entered promiscuous mode [ 88.157203][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 88.157319][ T5810] Cannot create hsr debugfs directory [ 88.236465][ T5804] hsr_slave_0: entered promiscuous mode [ 88.238027][ T5804] hsr_slave_1: entered promiscuous mode [ 88.238946][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 88.238978][ T5804] Cannot create hsr debugfs directory [ 88.249152][ T5813] hsr_slave_0: entered promiscuous mode [ 88.250377][ T5813] hsr_slave_1: entered promiscuous mode [ 88.252335][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 88.252360][ T5813] Cannot create hsr debugfs directory [ 88.358063][ T5812] hsr_slave_0: entered promiscuous mode [ 88.358852][ T5812] hsr_slave_1: entered promiscuous mode [ 88.359398][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 88.359420][ T5812] Cannot create hsr debugfs directory [ 89.482174][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.521289][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.557453][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.613740][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.723285][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.730921][ T5817] Bluetooth: hci1: command tx timeout [ 89.730949][ T5817] Bluetooth: hci3: command tx timeout [ 89.731087][ T5808] Bluetooth: hci0: command tx timeout [ 89.783240][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.810878][ T5819] Bluetooth: hci4: command tx timeout [ 89.810912][ T5819] Bluetooth: hci2: command tx timeout [ 89.842394][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.893497][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.007731][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.049489][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.076512][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.121807][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.261691][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.308543][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.362455][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.388708][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.505622][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.537430][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.578119][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.589448][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.620561][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.713422][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.754318][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.755406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.759622][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.807110][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.807273][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.854615][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.889250][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.907385][ T817] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.907587][ T817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.947360][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.947478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.000305][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.018321][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.043051][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.043390][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.093789][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.093912][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.159342][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.189816][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.223949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.224174][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.270171][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.280109][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.360534][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.422090][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.422684][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.459289][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.471190][ T817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.706776][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.800347][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.810822][ T5808] Bluetooth: hci0: command tx timeout [ 91.810852][ T5808] Bluetooth: hci3: command tx timeout [ 91.810868][ T5808] Bluetooth: hci1: command tx timeout [ 91.902255][ T5819] Bluetooth: hci2: command tx timeout [ 91.902264][ T5808] Bluetooth: hci4: command tx timeout [ 92.040276][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.060558][ T5803] veth0_vlan: entered promiscuous mode [ 92.122579][ T5803] veth1_vlan: entered promiscuous mode [ 92.123792][ T5810] veth0_vlan: entered promiscuous mode [ 92.151917][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.200422][ T5810] veth1_vlan: entered promiscuous mode [ 92.284619][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.309102][ T5803] veth0_macvtap: entered promiscuous mode [ 92.321396][ T5804] veth0_vlan: entered promiscuous mode [ 92.345598][ T5803] veth1_macvtap: entered promiscuous mode [ 92.396894][ T5804] veth1_vlan: entered promiscuous mode [ 92.410003][ T5810] veth0_macvtap: entered promiscuous mode [ 92.436279][ T5810] veth1_macvtap: entered promiscuous mode [ 92.469253][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.502978][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.554479][ T2832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.570406][ T2832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584232][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.599190][ T2832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.615302][ T5812] veth0_vlan: entered promiscuous mode [ 92.616695][ T2832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.641944][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.683467][ T5804] veth0_macvtap: entered promiscuous mode [ 92.738163][ T5804] veth1_macvtap: entered promiscuous mode [ 92.743344][ T5812] veth1_vlan: entered promiscuous mode [ 92.763032][ T1518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.767503][ T1518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.792514][ T1518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.874785][ T1518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.005259][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.045531][ T1518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.045556][ T1518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.078514][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.116361][ T5813] veth0_vlan: entered promiscuous mode [ 93.173507][ T2832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.185351][ T2832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.206628][ T2832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.221637][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.221658][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.223370][ T5813] veth1_vlan: entered promiscuous mode [ 93.226239][ T2832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.267305][ T5812] veth0_macvtap: entered promiscuous mode [ 93.287281][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.287299][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.341826][ T5812] veth1_macvtap: entered promiscuous mode [ 93.554243][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.554264][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.605465][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.667277][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.719058][ T5813] veth0_macvtap: entered promiscuous mode [ 93.754706][ T3610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.758084][ T817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.758103][ T817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.764706][ T3610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771297][ T5813] veth1_macvtap: entered promiscuous mode [ 93.784405][ T3610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.796210][ T3610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.890761][ T5808] Bluetooth: hci1: command tx timeout [ 93.890794][ T5808] Bluetooth: hci3: command tx timeout [ 93.890819][ T5808] Bluetooth: hci0: command tx timeout [ 93.971244][ T5819] Bluetooth: hci4: command tx timeout [ 93.971274][ T5819] Bluetooth: hci2: command tx timeout [ 94.150825][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.150845][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.336645][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.581755][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.625122][ T3610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.668474][ T3610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.676007][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.676027][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.677637][ T3610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.689080][ T3610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.653078][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.653100][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.016496][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.016516][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.306782][ T5935] tmpfs: Unknown parameter 'fscontext' [ 96.850387][ T37] audit: type=1326 audit(1770527270.487:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.850437][ T37] audit: type=1326 audit(1770527270.487:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.850472][ T37] audit: type=1326 audit(1770527270.487:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.850509][ T37] audit: type=1326 audit(1770527270.487:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.850544][ T37] audit: type=1326 audit(1770527270.497:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.850956][ T37] audit: type=1326 audit(1770527270.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.850995][ T37] audit: type=1326 audit(1770527270.497:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.851031][ T37] audit: type=1326 audit(1770527270.497:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.851068][ T37] audit: type=1326 audit(1770527270.497:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 96.851104][ T37] audit: type=1326 audit(1770527270.507:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 97.241722][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.241743][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.343985][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.891215][ T5884] IPVS: starting estimator thread 0... [ 99.939117][ T5954] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 99.940494][ T5954] IPVS: ip_vs_add_dest(): server weight less than zero [ 99.960674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.968394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.031981][ T5958] IPVS: using max 10 ests per chain, 24000 per kthread [ 100.135474][ T5965] IPv6: addrconf: prefix option has invalid lifetime [ 100.410460][ T5884] kernel read not supported for file /19/smaps (pid: 5884 comm: kworker/1:4) [ 101.500659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.500720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.501886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.502505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.502549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.502611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.502672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.502713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.443507][ T6017] Bluetooth: MGMT ver 1.23 [ 123.580855][ T6082] IPv6: addrconf: prefix option has invalid lifetime [ 124.069998][ T6092] 9p: Bad value for 'wfdno' [ 128.984878][ T6133] tmpfs: Unknown parameter 'fscontext' [ 130.766248][ T37] kauditd_printk_skb: 121 callbacks suppressed [ 130.766268][ T37] audit: type=1326 audit(1770527303.947:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766311][ T37] audit: type=1326 audit(1770527303.957:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766346][ T37] audit: type=1326 audit(1770527303.957:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766381][ T37] audit: type=1326 audit(1770527303.957:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766413][ T37] audit: type=1326 audit(1770527303.967:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766448][ T37] audit: type=1326 audit(1770527303.967:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766481][ T37] audit: type=1326 audit(1770527303.987:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766518][ T37] audit: type=1326 audit(1770527303.987:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766553][ T37] audit: type=1326 audit(1770527303.997:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 130.766587][ T37] audit: type=1326 audit(1770527304.007:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553969aeb9 code=0x7fc00000 [ 131.001132][ T6138] kernel profiling enabled (shift: 9) [ 132.945188][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.945312][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.397376][ T6195] tmpfs: Unknown parameter 'fscontext' [ 143.620748][ T37] kauditd_printk_skb: 285 callbacks suppressed [ 143.620767][ T37] audit: type=1326 audit(1770527317.317:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6193 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 151.563196][ T6264] tmpfs: Unknown parameter 'fscontext' [ 152.391577][ T37] audit: type=1326 audit(1770527325.757:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391629][ T37] audit: type=1326 audit(1770527325.757:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391667][ T37] audit: type=1326 audit(1770527325.767:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391704][ T37] audit: type=1326 audit(1770527325.767:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391740][ T37] audit: type=1326 audit(1770527325.767:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391777][ T37] audit: type=1326 audit(1770527325.767:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391812][ T37] audit: type=1326 audit(1770527325.767:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391845][ T37] audit: type=1326 audit(1770527325.767:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391880][ T37] audit: type=1326 audit(1770527325.767:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 152.391924][ T37] audit: type=1326 audit(1770527325.767:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 154.535396][ T6292] Zero length message leads to an empty skb [ 164.927635][ T37] kauditd_printk_skb: 186 callbacks suppressed [ 164.927676][ T37] audit: type=1326 audit(1770527338.607:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.927952][ T37] audit: type=1326 audit(1770527338.607:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.928174][ T37] audit: type=1326 audit(1770527338.607:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.928426][ T37] audit: type=1326 audit(1770527338.607:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.928677][ T37] audit: type=1326 audit(1770527338.607:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.928920][ T37] audit: type=1326 audit(1770527338.607:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.929208][ T37] audit: type=1326 audit(1770527338.607:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.929490][ T37] audit: type=1326 audit(1770527338.607:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.929712][ T37] audit: type=1326 audit(1770527338.607:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 164.929954][ T37] audit: type=1326 audit(1770527338.607:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 165.508897][ T6374] syz_tun: entered allmulticast mode [ 176.068973][ T31] IPVS: starting estimator thread 0... [ 176.071033][ T6468] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 176.076835][ T6468] IPVS: ip_vs_add_dest(): server weight less than zero [ 176.163230][ T6471] IPVS: using max 16 ests per chain, 38400 per kthread [ 191.115706][ T6603] binder: BINDER_SET_CONTEXT_MGR already set [ 191.115721][ T6603] binder: 6585:6603 ioctl 4018620d 200000004a80 returned -16 [ 191.855221][ T6605] tmpfs: Unknown parameter 'fscontext' [ 193.857796][ T37] kauditd_printk_skb: 453 callbacks suppressed [ 193.857817][ T37] audit: type=1326 audit(1770527367.537:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.857867][ T37] audit: type=1326 audit(1770527367.537:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.857918][ T37] audit: type=1326 audit(1770527367.537:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.857977][ T37] audit: type=1326 audit(1770527367.537:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.858020][ T37] audit: type=1326 audit(1770527367.537:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.858058][ T37] audit: type=1326 audit(1770527367.537:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.858096][ T37] audit: type=1326 audit(1770527367.537:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.858135][ T37] audit: type=1326 audit(1770527367.537:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.858172][ T37] audit: type=1326 audit(1770527367.537:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 193.858209][ T37] audit: type=1326 audit(1770527367.537:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7fc00000 [ 194.379144][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379213][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.421550][ T6653] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 200.677793][ T6659] tmpfs: Unknown parameter 'fscontext' [ 201.363241][ T37] kauditd_printk_skb: 540 callbacks suppressed [ 201.363259][ T37] audit: type=1326 audit(1770527374.947:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363307][ T37] audit: type=1326 audit(1770527374.957:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363345][ T37] audit: type=1326 audit(1770527374.957:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363382][ T37] audit: type=1326 audit(1770527374.957:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363417][ T37] audit: type=1326 audit(1770527374.957:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363453][ T37] audit: type=1326 audit(1770527374.957:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363488][ T37] audit: type=1326 audit(1770527374.957:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363526][ T37] audit: type=1326 audit(1770527374.967:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363563][ T37] audit: type=1326 audit(1770527374.967:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 201.363600][ T37] audit: type=1326 audit(1770527374.967:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102da1aeb9 code=0x7fc00000 [ 207.493762][ T6704] tmpfs: Unknown parameter 'fscontext' [ 208.191011][ T37] kauditd_printk_skb: 56 callbacks suppressed [ 208.191030][ T37] audit: type=1326 audit(1770527381.777:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191072][ T37] audit: type=1326 audit(1770527381.777:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191110][ T37] audit: type=1326 audit(1770527381.777:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191146][ T37] audit: type=1326 audit(1770527381.777:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191184][ T37] audit: type=1326 audit(1770527381.787:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191230][ T37] audit: type=1326 audit(1770527381.787:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191267][ T37] audit: type=1326 audit(1770527381.787:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191304][ T37] audit: type=1326 audit(1770527381.787:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191342][ T37] audit: type=1326 audit(1770527381.787:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 208.191379][ T37] audit: type=1326 audit(1770527381.787:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 212.220256][ T62] Bluetooth: hci1: command 0x0406 tx timeout [ 212.239571][ T62] Bluetooth: hci0: command 0x0406 tx timeout [ 212.239692][ T62] Bluetooth: hci3: command 0x0406 tx timeout [ 212.240556][ T62] Bluetooth: hci4: command 0x0406 tx timeout [ 212.609145][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 217.465053][ T6755] binder: BINDER_SET_CONTEXT_MGR already set [ 217.465069][ T6755] binder: 6739:6755 ioctl 4018620d 200000004a80 returned -16 [ 217.501671][ T6755] binder: 6739:6755 ioctl c0306201 2000000004c0 returned -22 [ 219.198011][ T5884] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 221.133111][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 221.139700][ T5884] usb 2-1: device descriptor read/all, error -71 [ 221.579316][ T6776] tmpfs: Unknown parameter 'fscontext' [ 222.332040][ T37] kauditd_printk_skb: 56 callbacks suppressed [ 222.332061][ T37] audit: type=1326 audit(1770527395.927:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6773 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68291faeb9 code=0x7fc00000 [ 226.305330][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 254.551919][ T6955] binder: 6947:6955 ioctl 4018620d 0 returned -22 [ 256.936114][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.936183][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.258878][ T37] audit: type=1326 audit(1770527443.927:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.258912][ T37] audit: type=1326 audit(1770527443.927:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.258933][ T37] audit: type=1326 audit(1770527443.927:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.258953][ T37] audit: type=1326 audit(1770527443.927:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.258974][ T37] audit: type=1326 audit(1770527443.927:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.258995][ T37] audit: type=1326 audit(1770527443.927:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eb18cb78e code=0x7ffc0000 [ 270.259014][ T37] audit: type=1326 audit(1770527443.947:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.259035][ T37] audit: type=1326 audit(1770527443.947:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.305331][ T37] audit: type=1326 audit(1770527443.947:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 270.305377][ T37] audit: type=1326 audit(1770527443.947:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb190aeb9 code=0x7ffc0000 [ 282.027426][ T7156] syzkaller0: entered promiscuous mode [ 282.027453][ T7156] syzkaller0: entered allmulticast mode [ 282.314663][ T7156] tipc: Started in network mode [ 282.314692][ T7156] tipc: Node identity a26caa5344c3, cluster identity 4711 [ 282.315532][ T7156] tipc: Enabled bearer , priority 0 [ 283.417874][ T7154] tipc: Resetting bearer [ 284.781802][ T7154] tipc: Disabling bearer [ 287.680676][ T44] tipc: Node number set to 3870272083 [ 287.763012][ T7193] syzkaller0: entered promiscuous mode [ 287.763039][ T7193] syzkaller0: entered allmulticast mode [ 288.150712][ T7199] tipc: Started in network mode [ 288.150742][ T7199] tipc: Node identity 5ecad3abc664, cluster identity 4711 [ 288.151180][ T7199] tipc: Enabled bearer , priority 0 [ 288.243322][ T7192] tipc: Resetting bearer [ 288.664905][ T7192] tipc: Disabling bearer [ 291.260786][ T993] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 291.410763][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 291.434718][ T993] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 291.434745][ T993] usb 4-1: config 0 has no interface number 0 [ 291.434791][ T993] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 291.434814][ T993] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 291.434838][ T993] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.434863][ T993] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.434905][ T993] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.434927][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.590946][ T993] usb 4-1: config 0 descriptor?? [ 291.676599][ T993] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 292.247507][ T993] usb 4-1: USB disconnect, device number 2 [ 292.295632][ T993] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 298.658482][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 300.957796][ T7283] syz.1.356 (7283) used greatest stack depth: 18744 bytes left [ 311.580921][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 311.757061][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 311.760407][ T5908] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 311.760428][ T5908] usb 3-1: config 0 has no interface number 0 [ 311.760454][ T5908] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.760466][ T5908] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 311.760479][ T5908] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.760492][ T5908] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.760515][ T5908] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 311.760528][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.858611][ T5908] usb 3-1: config 0 descriptor?? [ 311.952493][ T5908] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 314.242855][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 314.304346][ T6093] ------------[ cut here ]------------ [ 314.304361][ T6093] in_task() && kcov_mode_enabled(mode) [ 314.304376][ T6093] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:15/6093 [ 314.304435][ T6093] Modules linked in: [ 314.304473][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 314.304497][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 314.304511][ T6093] Workqueue: events_unbound cfg80211_wiphy_work [ 314.304540][ T6093] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 314.304571][ T6093] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 314.304589][ T6093] RSP: 0018:ffffc90005ccf978 EFLAGS: 00010202 [ 314.304606][ T6093] RAX: 0000000000000002 RBX: ffff88801cfe1e40 RCX: 0000000000000000 [ 314.304620][ T6093] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 314.304634][ T6093] RBP: ffff888028e22780 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 314.304649][ T6093] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff88802fd4dd08 [ 314.304663][ T6093] R13: ffff888060e007c0 R14: 0000000000000000 R15: ffff88802fd4dd20 [ 314.304678][ T6093] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 314.304694][ T6093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.304708][ T6093] CR2: 00007f5539907888 CR3: 0000000032ec4000 CR4: 00000000003526f0 [ 314.304726][ T6093] Call Trace: [ 314.304733][ T6093] [ 314.304751][ T6093] ieee80211_iface_work+0x211/0x12b0 [ 314.304789][ T6093] cfg80211_wiphy_work+0x2ab/0x450 [ 314.304822][ T6093] ? process_scheduled_works+0xa0f/0x17a0 [ 314.304847][ T6093] process_scheduled_works+0xaec/0x17a0 [ 314.304895][ T6093] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.304914][ T6093] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.304946][ T6093] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.304973][ T6093] ? schedule+0x90/0x360 [ 314.305006][ T6093] worker_thread+0xda6/0x1360 [ 314.305053][ T6093] kthread+0x726/0x8b0 [ 314.305080][ T6093] ? __pfx_worker_thread+0x10/0x10 [ 314.305099][ T6093] ? __pfx_kthread+0x10/0x10 [ 314.305121][ T6093] ? rt_spin_unlock+0x14f/0x200 [ 314.305146][ T6093] ? rt_spin_unlock+0x160/0x200 [ 314.305164][ T6093] ? __pfx_kthread+0x10/0x10 [ 314.305190][ T6093] ret_from_fork+0x51b/0xa40 [ 314.305214][ T6093] ? __pfx_ret_from_fork+0x10/0x10 [ 314.305232][ T6093] ? __switch_to+0xc82/0x1410 [ 314.305265][ T6093] ? __pfx_kthread+0x10/0x10 [ 314.305289][ T6093] ret_from_fork_asm+0x1a/0x30 [ 314.305334][ T6093] [ 314.305345][ T6093] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.305358][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 314.305381][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 314.305393][ T6093] Workqueue: events_unbound cfg80211_wiphy_work [ 314.305417][ T6093] Call Trace: [ 314.305424][ T6093] [ 314.305432][ T6093] vpanic+0x1e0/0x670 [ 314.305463][ T6093] panic+0xc5/0xd0 [ 314.305488][ T6093] ? __pfx_panic+0x10/0x10 [ 314.305524][ T6093] ? ret_from_fork_asm+0x1a/0x30 [ 314.305556][ T6093] __warn+0x315/0x4a0 [ 314.305581][ T6093] ? kcov_remote_start+0x5d8/0x710 [ 314.305608][ T6093] ? kcov_remote_start+0x5d8/0x710 [ 314.305635][ T6093] __report_bug+0x29a/0x540 [ 314.305667][ T6093] ? kcov_remote_start+0x5d8/0x710 [ 314.305692][ T6093] ? __pfx___report_bug+0x10/0x10 [ 314.305717][ T6093] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.305746][ T6093] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 314.305771][ T6093] ? rt_spin_lock+0x1e0/0x400 [ 314.305793][ T6093] ? rt_spin_lock+0x1e0/0x400 [ 314.305822][ T6093] ? kcov_remote_start+0x5d8/0x710 [ 314.305849][ T6093] report_bug+0x16a/0x220 [ 314.305873][ T6093] ? kcov_remote_start+0x5d8/0x710 [ 314.305897][ T6093] ? kcov_remote_start+0x5da/0x710 [ 314.305921][ T6093] handle_bug+0x98/0x200 [ 314.305952][ T6093] exc_invalid_op+0x1a/0x50 [ 314.305980][ T6093] asm_exc_invalid_op+0x1a/0x20 [ 314.305999][ T6093] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 314.306024][ T6093] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 314.306041][ T6093] RSP: 0018:ffffc90005ccf978 EFLAGS: 00010202 [ 314.306057][ T6093] RAX: 0000000000000002 RBX: ffff88801cfe1e40 RCX: 0000000000000000 [ 314.306069][ T6093] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 314.306083][ T6093] RBP: ffff888028e22780 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 314.306098][ T6093] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff88802fd4dd08 [ 314.306113][ T6093] R13: ffff888060e007c0 R14: 0000000000000000 R15: ffff88802fd4dd20 [ 314.306135][ T6093] ? rt_spin_lock+0x1e0/0x400 [ 314.306163][ T6093] ? kcov_remote_start+0xe0/0x710 [ 314.306191][ T6093] ieee80211_iface_work+0x211/0x12b0 [ 314.306226][ T6093] cfg80211_wiphy_work+0x2ab/0x450 [ 314.306251][ T6093] ? process_scheduled_works+0xa0f/0x17a0 [ 314.306272][ T6093] process_scheduled_works+0xaec/0x17a0 [ 314.306320][ T6093] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.306338][ T6093] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.306369][ T6093] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.306395][ T6093] ? schedule+0x90/0x360 [ 314.306428][ T6093] worker_thread+0xda6/0x1360 [ 314.306474][ T6093] kthread+0x726/0x8b0 [ 314.306502][ T6093] ? __pfx_worker_thread+0x10/0x10 [ 314.306521][ T6093] ? __pfx_kthread+0x10/0x10 [ 314.306542][ T6093] ? rt_spin_unlock+0x14f/0x200 [ 314.306567][ T6093] ? rt_spin_unlock+0x160/0x200 [ 314.306585][ T6093] ? __pfx_kthread+0x10/0x10 [ 314.306610][ T6093] ret_from_fork+0x51b/0xa40 [ 314.306633][ T6093] ? __pfx_ret_from_fork+0x10/0x10 [ 314.306653][ T6093] ? __switch_to+0xc82/0x1410 [ 314.306685][ T6093] ? __pfx_kthread+0x10/0x10 [ 314.306709][ T6093] ret_from_fork_asm+0x1a/0x30 [ 314.306753][ T6093] [ 314.307151][ T6093] Kernel Offset: disabled