last executing test programs: 3m58.717476693s ago: executing program 1 (id=2): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x10, 0x6, 0x3, 0x28, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r7 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x20}], 0x1, 0x0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 3m40.749844586s ago: executing program 32 (id=2): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x10, 0x6, 0x3, 0x28, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r7 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x20}], 0x1, 0x0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 14.829450988s ago: executing program 0 (id=1074): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x1) 13.744608734s ago: executing program 0 (id=1085): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x10, 0x6, 0x3, 0x28, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 13.064715386s ago: executing program 3 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 8.948330682s ago: executing program 3 (id=1131): r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000060003400001000008"], 0xa0}}, 0x0) 7.746514136s ago: executing program 3 (id=1137): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000d01000000000000000000000a02000000000000000000000b00"/78], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9ab5, 0x80000000}, {0xfffffff9, 0x7fffe}]}}) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x13f, 0x9}}, 0x20) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r5, 0x101, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 7.592466146s ago: executing program 2 (id=1140): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 7.314649996s ago: executing program 2 (id=1143): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4c78, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 7.292699554s ago: executing program 5 (id=1145): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000d01000000000000000000000a02000000000000000000000b00"/78], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9ab5, 0x80000000}, {0xfffffff9, 0x7fffe}]}}) socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x1694, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x13f, 0x9}}, 0x20) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r5, 0x101, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 6.950056613s ago: executing program 0 (id=1148): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x38f9, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x0, r2}, 0x18) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}]}]}, 0x2c}}, 0x0) 6.339007925s ago: executing program 2 (id=1155): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.338844339s ago: executing program 4 (id=1156): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x1) 6.269523114s ago: executing program 3 (id=1157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800"/125], 0xa0}}, 0x0) 6.186491931s ago: executing program 3 (id=1158): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000d01000000000000000000000a02000000000000000000000b00"/78], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9ab5, 0x80000000}, {0xfffffff9, 0x7fffe}]}}) socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x13f, 0x9}}, 0x20) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r5, 0x101, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 5.226885552s ago: executing program 4 (id=1159): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x10, 0x6, 0x3, 0x28, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 5.120995859s ago: executing program 2 (id=1160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x26, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca75"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x679ac2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000040)='1\x00', 0x1) 5.047368035s ago: executing program 5 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x20050800) 4.986198607s ago: executing program 4 (id=1162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) 4.950193834s ago: executing program 4 (id=1163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 4.866277406s ago: executing program 5 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) 4.86611852s ago: executing program 4 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 4.730867808s ago: executing program 4 (id=1166): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="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", 0x1b4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d", 0x91}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e01391", 0x4}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.040582433s ago: executing program 5 (id=1168): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 3.038903476s ago: executing program 2 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c"], 0xa0}}, 0x0) 2.99705579s ago: executing program 0 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) syslog(0x4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) 671.395841ms ago: executing program 0 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000"], 0x2c}}, 0x0) 650.458993ms ago: executing program 2 (id=1172): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x10, 0x6, 0x3, 0x28, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 561.406993ms ago: executing program 5 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) 158.297773ms ago: executing program 0 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x20050800) 152.576588ms ago: executing program 3 (id=1175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000780)={0x5, [[0x4, 0x10001, 0x7, 0x4, 0x1ff, 0xffff, 0x401, 0x8000], [0x7f, 0x800, 0x3, 0x78, 0x0, 0x4, 0x62e2, 0x80], [0x401, 0x8, 0x400, 0x1, 0x0, 0x10000, 0x1, 0x5]], '\x00', [{0x4, 0x7fffffff, 0x1, 0x1}, {0xbbade33f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0xfffffffa, 0x1, 0x1, 0x1}, {0xa, 0x3}, {0x1, 0x5, 0x1, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x4b388352, 0x0, 0x0, 0x0, 0x1}, {0x9e98, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x7, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x3e800000}) dup(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a00)='^nurceP\x8a]\x92\x9a\xa09\x1b\x8d\x9b\xb6y\xd9\xd0\x10\x81\x9d\x04:\xf3\xf9\xf0\xf2d[\x02t\x99\xc1M\xd6}*\xb0\xbdx_\x00\x92\x1e\xf92bw\x1e\'\x8c\xcc\xa1\xb1:!\a\x8c\x19\xfb\x1e\x8aF\xb7\x90/\xa8\x06\xaa\x06\xe7\xb9Z\xc0\xad\x9a\x97P\x85\x1f\xb7\x1c@F\xf2>\\j\x90\x85\xc6\x05\x82\x0f\xdf\xba', &(0x7f0000000500)='\x00\x00\x00\x00\x00\xe3f\xc4\xe2X:\xa8U\xcbi\x8bY\xe4\xae\xc0\'\xccKk\xa8\xf2\xf0\xb3\xa8\x9941iHR\x0e\xa7P\x84\xc7x$\xd2I\x81\x8b\x12f\xf7\xb0\xf5)_\tW\x9bJLT\x91m\xe2\xb3D\x92\x1b\x1c\'$\xff/\xad\xc8h\x02\xc4\x82L\n\xb6t\n*\xe6\xf2~+\xfbN\xd6\xdby\x9bS\x90\x83\xcf5\"\x15\xd1<\x97=\xc4y\xb0?Z\x04\x9c\xc4>E^g\x99S\x83\xb2\xbd\xfc9\xb7\xdc\xb0\xdbQ?M\xf4\xcf\x9b\x03_\x92pI\xde\xa8\xbe\xa2\x88\v\xe1\x97\x81\xe6XY\xe0\x87K~R\xdd\x9a\a\xa1\x0fe=i\xc62\'\x85\xe8K\xee\x96\x00c0\r\x13&\x01\xd0S\'O\xd9\xff\x9a\x12\xd5\xd2\x1a\x04 \xd1\xa8;9$\x17\xb8m\x8ev\xda\xff\v\xd8\xdd\xeb\x0e\x87\x00\x00\x00\x00\x00\x00\x00\x00OZK\xc7\xbb\xc7\n\xc3\xa8\xe6\xcdv\x887\xc1R(\xbd|\x19\xee\xc3\xbdH\xb4+\xdc-\xf0\xcc\x00\x00\x006\x1fbCt#\b\x00\x00\x00\rQS\xeb\vH[\"z\xa5b\xde\a\xe8\x95q\xff\xd5j\xda\xdd\xb3\x86\x1e\xaf\xbf\xe3\x11\x9c\x00\t\x00\x00\x00\x00\x00\x00\x00\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x98\xd2<\x14\x12>\xa4g8\x10\xd9\xf6#\x1b\x8f\xe6\xf7I\xb2 \xcf\xaa\x81\xc6\xcc\xc5\x13\xfae\xd3\xd7!6\x18(\x91\xdf%\xeeW\xf6\xe6LN\xaez\xcc\xb6\xf7\xc7P\x01K\xf4\x1czN3\xfd\xfc\x01m\xfa \a\x8e\x15\x8d\x80\x18P7\xd25\xe6\v\x7f\'\xc4\nMM\x16\r\a\xbf\xe7\xf6\xf6\x03\x10\xbe6\xfb\x8bv\xc8\xd3.\x90\xc2F\xb1]x\xe6\xdd\xd3\x18\x8e\x16\xaa\x84H\xcb\xf0\xa5\xfc\x7f\x949\xc9\x14Vz\x9f\x18\xb7\xe5+\xeb\xb8}\xd2\x93\'\x1b\x90\xc0\xe4XR]\x0f\xd2\x8erP\xf1\xbam\x18\x13\x9cl\xb0S\xf5;Z&\xc9\xfc\xba\x04D$\x06\x85?\xff\xb1(Y?*\xd7Q\xd0\x92\x1c\x90\x11`b[\x87\xeei\xc9l\x00K\xda\xa32\xa1\xa0\xaeI\xb0\xdb\x86$\xa7o\x9f\vG\xfc\xd9-V\x0fh\xd8\x15$P\x95\xb3\x83\x06\x8e', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x101, 0x0) write(r4, &(0x7f00000000c0)='usbip-vudc', 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xfe, 0x7fff7ff8}]}) write(0xffffffffffffffff, &(0x7f0000000140)='pcspkr', 0x6) 0s ago: executing program 5 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 72.633703][ T5569] cgroup: Unknown subsys name 'net' [ 72.904465][ T5569] cgroup: Unknown subsys name 'cpuset' [ 72.949391][ T5569] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.524947][ T5569] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.981237][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.992551][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.997701][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.018256][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.024008][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.025890][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.034693][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.053005][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.054040][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.055179][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.061692][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.063174][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.068363][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.070661][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.071616][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.093124][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.095475][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.098083][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.102832][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.104529][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.105277][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.105796][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.147180][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.215396][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.227473][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.170409][ T5586] Bluetooth: hci1: command tx timeout [ 79.170526][ T5586] Bluetooth: hci0: command tx timeout [ 79.248928][ T5588] Bluetooth: hci4: command tx timeout [ 79.249074][ T5588] Bluetooth: hci2: command tx timeout [ 79.329479][ T5586] Bluetooth: hci3: command tx timeout [ 79.476949][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.478075][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.478355][ T5583] bridge_slave_0: entered allmulticast mode [ 79.481923][ T5583] bridge_slave_0: entered promiscuous mode [ 79.531653][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.531729][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.531839][ T5584] bridge_slave_0: entered allmulticast mode [ 79.533441][ T5584] bridge_slave_0: entered promiscuous mode [ 79.536283][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.536373][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.536647][ T5583] bridge_slave_1: entered allmulticast mode [ 79.537977][ T5583] bridge_slave_1: entered promiscuous mode [ 79.539416][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.539526][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.540036][ T5580] bridge_slave_0: entered allmulticast mode [ 79.542520][ T5580] bridge_slave_0: entered promiscuous mode [ 79.546346][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.546463][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.546667][ T5579] bridge_slave_0: entered allmulticast mode [ 79.549399][ T5579] bridge_slave_0: entered promiscuous mode [ 79.578370][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.578497][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.578650][ T5584] bridge_slave_1: entered allmulticast mode [ 79.585351][ T5584] bridge_slave_1: entered promiscuous mode [ 79.609260][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.609373][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.609519][ T5580] bridge_slave_1: entered allmulticast mode [ 79.613062][ T5580] bridge_slave_1: entered promiscuous mode [ 79.614882][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.614992][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.615133][ T5579] bridge_slave_1: entered allmulticast mode [ 79.617877][ T5579] bridge_slave_1: entered promiscuous mode [ 79.623835][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.623945][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.624083][ T5582] bridge_slave_0: entered allmulticast mode [ 79.627463][ T5582] bridge_slave_0: entered promiscuous mode [ 79.783444][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.783539][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.783638][ T5582] bridge_slave_1: entered allmulticast mode [ 79.785022][ T5582] bridge_slave_1: entered promiscuous mode [ 79.810745][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.854268][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.857999][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.872331][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.877935][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.901421][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.917854][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.922605][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.093049][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.146066][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.167663][ T5583] team0: Port device team_slave_0 added [ 80.206693][ T5584] team0: Port device team_slave_0 added [ 80.208756][ T5583] team0: Port device team_slave_1 added [ 80.212557][ T5580] team0: Port device team_slave_0 added [ 80.225807][ T5579] team0: Port device team_slave_0 added [ 80.242593][ T5584] team0: Port device team_slave_1 added [ 80.258034][ T5580] team0: Port device team_slave_1 added [ 80.260727][ T5579] team0: Port device team_slave_1 added [ 80.264478][ T5582] team0: Port device team_slave_0 added [ 80.333664][ T5582] team0: Port device team_slave_1 added [ 80.349313][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.349327][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.349350][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.412025][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.412040][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.412052][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.413102][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.413114][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.413137][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.415037][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.415047][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.415059][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.416848][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.416860][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.416882][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.437643][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.437659][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.437681][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.457142][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.457156][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.457180][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.462278][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.462293][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.462330][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.478661][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.478692][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.478715][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.516056][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.516071][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.516095][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.665929][ T5583] hsr_slave_0: entered promiscuous mode [ 80.667250][ T5583] hsr_slave_1: entered promiscuous mode [ 80.732386][ T5584] hsr_slave_0: entered promiscuous mode [ 80.733613][ T5584] hsr_slave_1: entered promiscuous mode [ 80.734562][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 80.734688][ T5584] Cannot create hsr debugfs directory [ 80.792058][ T5580] hsr_slave_0: entered promiscuous mode [ 80.793312][ T5580] hsr_slave_1: entered promiscuous mode [ 80.794542][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 80.794563][ T5580] Cannot create hsr debugfs directory [ 80.807406][ T5579] hsr_slave_0: entered promiscuous mode [ 80.808585][ T5579] hsr_slave_1: entered promiscuous mode [ 80.812001][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 80.812022][ T5579] Cannot create hsr debugfs directory [ 80.867360][ T5582] hsr_slave_0: entered promiscuous mode [ 80.868619][ T5582] hsr_slave_1: entered promiscuous mode [ 80.870060][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 80.870082][ T5582] Cannot create hsr debugfs directory [ 81.249008][ T5586] Bluetooth: hci0: command tx timeout [ 81.249073][ T5586] Bluetooth: hci1: command tx timeout [ 81.339103][ T5588] Bluetooth: hci2: command tx timeout [ 81.339135][ T5588] Bluetooth: hci4: command tx timeout [ 81.419375][ T5586] Bluetooth: hci3: command tx timeout [ 82.067593][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.112275][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.126100][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.162616][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.165630][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.197388][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.224193][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.253912][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.356600][ T5579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.405706][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.419715][ T5579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.454755][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.457213][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.505188][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.537103][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.571898][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.695547][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.722467][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.738591][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.789899][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.797676][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.831834][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.855624][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.895245][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.025105][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.052765][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.059552][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.094672][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.103564][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.127931][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.166073][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.194103][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.252776][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.314194][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.328953][ T5586] Bluetooth: hci1: command tx timeout [ 83.328981][ T5586] Bluetooth: hci0: command tx timeout [ 83.363939][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.371293][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.404668][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.408928][ T5588] Bluetooth: hci4: command tx timeout [ 83.408955][ T5588] Bluetooth: hci2: command tx timeout [ 83.443329][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.486945][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.489423][ T5586] Bluetooth: hci3: command tx timeout [ 83.498724][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.542560][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.546769][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.600512][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.600612][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.606361][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.663390][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.663482][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.732171][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.786909][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.787296][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.810361][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.840227][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.840337][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.922057][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.975758][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.976012][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.003383][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.062597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.062691][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.188134][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.223826][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.303005][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.303838][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.358678][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.363520][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.445218][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.542384][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.542846][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.626445][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.626619][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.023553][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.409239][ T5586] Bluetooth: hci0: command tx timeout [ 85.409269][ T5586] Bluetooth: hci1: command tx timeout [ 85.475334][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.488943][ T5588] Bluetooth: hci2: command tx timeout [ 85.488967][ T5588] Bluetooth: hci4: command tx timeout [ 85.568953][ T5586] Bluetooth: hci3: command tx timeout [ 85.933108][ T5579] veth0_vlan: entered promiscuous mode [ 85.948745][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.056585][ T5579] veth1_vlan: entered promiscuous mode [ 86.088288][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.172003][ T5583] veth0_vlan: entered promiscuous mode [ 86.221595][ T5583] veth1_vlan: entered promiscuous mode [ 86.256177][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.271655][ T5579] veth0_macvtap: entered promiscuous mode [ 86.299639][ T5584] veth0_vlan: entered promiscuous mode [ 86.307931][ T5579] veth1_macvtap: entered promiscuous mode [ 86.387911][ T5584] veth1_vlan: entered promiscuous mode [ 86.405201][ T5580] veth0_vlan: entered promiscuous mode [ 86.437129][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.453431][ T5583] veth0_macvtap: entered promiscuous mode [ 86.476055][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.477461][ T5580] veth1_vlan: entered promiscuous mode [ 86.504716][ T5583] veth1_macvtap: entered promiscuous mode [ 86.548523][ T5582] veth0_vlan: entered promiscuous mode [ 86.624398][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.631380][ T5584] veth0_macvtap: entered promiscuous mode [ 86.684625][ T5582] veth1_vlan: entered promiscuous mode [ 86.723198][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.725320][ T5584] veth1_macvtap: entered promiscuous mode [ 86.744369][ T10] cfg80211: failed to load regulatory.db [ 87.026424][ T5580] veth0_macvtap: entered promiscuous mode [ 87.056113][ T5580] veth1_macvtap: entered promiscuous mode [ 87.176314][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.203848][ T3123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.203876][ T3123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.265848][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.408244][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.443241][ T5582] veth0_macvtap: entered promiscuous mode [ 87.475965][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.501099][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.501117][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.503721][ T5582] veth1_macvtap: entered promiscuous mode [ 87.720819][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.720835][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.980187][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.198290][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.204996][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.205014][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.376030][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.376050][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.553856][ T5782] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 88.625834][ T5781] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 88.644117][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.644135][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.530349][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.530367][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.948135][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.948154][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.096163][ T5786] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.627145][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.627163][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.778827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.798831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.818922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.200456][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.602813][ T1449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.993999][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.143686][ T5796] syz.4.7 (5796) used greatest stack depth: 19304 bytes left [ 93.633236][ T3607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.633862][ T3607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634015][ T3607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634155][ T3607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634271][ T3607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634361][ T3607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634505][ T3607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634560][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634579][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634597][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634615][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634639][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634657][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634675][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634692][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634710][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634727][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.637723][ T5805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 95.637860][ T5805] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.655099][ T5805] vhci_hcd vhci_hcd.0: Device attached [ 95.705859][ T5808] vhci_hcd: connection closed [ 95.953864][ T1014] vhci_hcd vhci_hcd.4: stop threads [ 95.954568][ T1014] vhci_hcd vhci_hcd.4: release socket [ 96.180122][ T1014] vhci_hcd vhci_hcd.4: disconnect device [ 97.983061][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.983081][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.557860][ T5830] syz.0.12 (5830) used greatest stack depth: 19240 bytes left [ 102.624021][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.457292][ T5852] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 106.634161][ T5853] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 109.413530][ T5870] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 109.426549][ T5870] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 111.087836][ T5588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.106828][ T5588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.126369][ T5588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.137665][ T5588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.138279][ T5588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.798851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.818830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.828821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.838816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.848813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.858827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.867801][ T5586] Bluetooth: hci5: command tx timeout [ 114.428842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.223327][ T5773] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 115.740386][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.740426][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.740465][ T5773] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 3.00 [ 115.740488][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.889151][ T5586] Bluetooth: hci5: command tx timeout [ 116.082808][ T5773] usb 5-1: config 0 descriptor?? [ 117.071460][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 117.108352][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108391][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108418][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108443][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108468][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108495][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108522][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108549][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108576][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.108603][ T5773] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x0 [ 117.511676][ T5773] lenovo 0003:17EF:60EE.0001: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 117.970265][ T5586] Bluetooth: hci5: command tx timeout [ 119.288474][ T5953] batman_adv: batadv0: Adding interface: veth0 [ 119.288492][ T5953] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.288523][ T5953] batman_adv: batadv0: Interface activated: veth0 [ 119.358341][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.358370][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.633470][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.633505][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.671462][ T5955] batman_adv: batadv0: Interface deactivated: veth0 [ 119.671493][ T5955] batman_adv: batadv0: Removing interface: veth0 [ 119.927162][ T5699] usb 5-1: USB disconnect, device number 2 [ 120.050111][ T5586] Bluetooth: hci5: command tx timeout [ 122.581712][ T5699] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.717901][ T5699] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.717931][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.845473][ T5699] usb 5-1: config 0 descriptor?? [ 124.161624][ T5699] cp210x 5-1:0.0: cp210x converter detected [ 124.190692][ T5699] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 124.190729][ T5699] cp210x 5-1:0.0: querying part number failed [ 125.166646][ T5699] usb 5-1: cp210x converter now attached to ttyUSB0 [ 130.185916][ T5592] usb 5-1: USB disconnect, device number 3 [ 130.217182][ T5592] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.230857][ T5592] cp210x 5-1:0.0: device disconnected [ 132.771994][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772560][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.051279][ T5586] Bluetooth: hci2: failed to read key size for handle 200 [ 135.386403][ T1132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.416629][ T6029] Zero length message leads to an empty skb [ 140.600031][ T1132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.049178][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.049299][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.049509][ T5883] bridge_slave_0: entered allmulticast mode [ 141.057339][ T5883] bridge_slave_0: entered promiscuous mode [ 142.085031][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.085098][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.085248][ T5883] bridge_slave_1: entered allmulticast mode [ 142.091461][ T5883] bridge_slave_1: entered promiscuous mode [ 142.687935][ T1132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.977691][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.039682][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.642841][ T1132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.682640][ T6095] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 143.704402][ T5883] team0: Port device team_slave_0 added [ 143.705342][ T6092] batman_adv: batadv0: Adding interface: veth0 [ 143.705356][ T6092] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.705388][ T6092] batman_adv: batadv0: Interface activated: veth0 [ 143.705986][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.706006][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.759230][ T6097] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 143.778110][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.778135][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.799909][ T6096] batman_adv: batadv0: Interface deactivated: veth0 [ 143.799934][ T6096] batman_adv: batadv0: Removing interface: veth0 [ 143.923139][ T5883] team0: Port device team_slave_1 added [ 144.106864][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.106880][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.106903][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.115943][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.115958][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.116001][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.920203][ T5883] hsr_slave_0: entered promiscuous mode [ 144.923026][ T5883] hsr_slave_1: entered promiscuous mode [ 144.928386][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 144.928409][ T5883] Cannot create hsr debugfs directory [ 146.211138][ T1132] bridge_slave_1: left allmulticast mode [ 146.211319][ T1132] bridge_slave_1: left promiscuous mode [ 146.220298][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.438578][ T1132] bridge_slave_0: left allmulticast mode [ 146.438612][ T1132] bridge_slave_0: left promiscuous mode [ 146.439672][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.564532][ T6132] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 149.615658][ T6133] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 149.651063][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.689421][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.711244][ T1132] bond0 (unregistering): Released all slaves [ 150.323780][ T6147] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 150.324266][ T6147] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 153.520619][ T5777] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.713156][ T5777] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.713183][ T5777] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 153.713217][ T5777] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 153.713237][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.828729][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 153.919367][ T5777] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 154.145211][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.275003][ T6194] fuse: Bad value for 'fd' [ 154.664336][ T6200] No source specified [ 159.480956][ T5717] usb 5-1: USB disconnect, device number 4 [ 163.020569][ T5883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.143410][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.158354][ T5883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.216600][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.730709][ T1132] hsr_slave_0: left promiscuous mode [ 165.727489][ T1132] hsr_slave_1: left promiscuous mode [ 165.728626][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.728715][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.771906][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.771931][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.840064][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 167.749982][ T1132] veth1_macvtap: left promiscuous mode [ 167.750255][ T1132] veth0_macvtap: left promiscuous mode [ 167.783707][ T1132] veth1_vlan: left promiscuous mode [ 167.784299][ T1132] veth0_vlan: left promiscuous mode [ 169.527289][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.557900][ T5588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.588191][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.597193][ T5588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.605693][ T5588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.100876][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 170.146171][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 170.483213][ T5883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.517071][ T5883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.530164][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 172.032641][ T5588] Bluetooth: hci4: command tx timeout [ 174.058728][ T5588] Bluetooth: hci4: command tx timeout [ 175.304823][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 176.129665][ T5588] Bluetooth: hci4: command tx timeout [ 177.741186][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 177.930940][ T6447] netlink: 80 bytes leftover after parsing attributes in process `syz.3.194'. [ 177.961743][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.209865][ T5588] Bluetooth: hci4: command tx timeout [ 179.129687][ T6473] random: crng reseeded on system resumption [ 180.242085][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.206'. [ 183.484816][ T6540] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 183.684664][ T6543] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 185.011991][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 192.674827][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.677029][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.677241][ T6333] bridge_slave_0: entered allmulticast mode [ 192.682045][ T6333] bridge_slave_0: entered promiscuous mode [ 192.685070][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.685258][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.685429][ T6333] bridge_slave_1: entered allmulticast mode [ 192.687988][ T6333] bridge_slave_1: entered promiscuous mode [ 192.903474][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.933657][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.498620][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.509018][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.284440][ T6333] team0: Port device team_slave_0 added [ 196.348324][ T6333] team0: Port device team_slave_1 added [ 196.552401][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.552417][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.552441][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.558487][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.558501][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.558525][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.918879][ T5777] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 197.069808][ T5777] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 197.082053][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.082110][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.082135][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.086609][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.086663][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.086689][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.099113][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.099168][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.099195][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.112539][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.112594][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.112621][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.201587][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.201641][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.201669][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.204507][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.204576][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.204603][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.228873][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.228924][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.228950][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.237448][ T5777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.237509][ T5777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.237543][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.278939][ T5777] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 197.278970][ T5777] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 197.278990][ T5777] usb 3-1: Product: syz [ 197.279004][ T5777] usb 3-1: Manufacturer: syz [ 197.279018][ T5777] usb 3-1: SerialNumber: syz [ 197.357488][ T6333] hsr_slave_0: entered promiscuous mode [ 197.369700][ T6333] hsr_slave_1: entered promiscuous mode [ 197.370657][ T6333] debugfs: 'hsr0' already exists in 'hsr' [ 197.370679][ T6333] Cannot create hsr debugfs directory [ 197.432842][ T5777] usb 3-1: config 0 descriptor?? [ 197.633125][ T5777] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 197.762018][ T5699] usb 3-1: USB disconnect, device number 2 [ 197.940382][ T5699] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 197.960798][ T1132] bridge_slave_1: left allmulticast mode [ 197.960830][ T1132] bridge_slave_1: left promiscuous mode [ 197.961061][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.160224][ T1132] bridge_slave_0: left allmulticast mode [ 198.160260][ T1132] bridge_slave_0: left promiscuous mode [ 198.164545][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.718948][ T5699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 198.868929][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 198.875687][ T5699] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 198.875713][ T5699] usb 3-1: config 0 has no interface number 0 [ 198.875758][ T5699] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 198.875782][ T5699] usb 3-1: config 0 interface 184 has no altsetting 0 [ 198.878694][ T5699] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 198.878721][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.878740][ T5699] usb 3-1: Product: syz [ 198.878754][ T5699] usb 3-1: Manufacturer: syz [ 198.879823][ T5699] usb 3-1: SerialNumber: syz [ 198.924173][ T5699] usb 3-1: config 0 descriptor?? [ 198.945278][ T6765] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.981144][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.099872][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.161247][ T6765] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.184561][ T1132] bond0 (unregistering): Released all slaves [ 199.574059][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 199.574088][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.575933][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 199.575960][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 199.575979][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 199.575996][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 199.581789][ T5699] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 201.064498][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 201.065192][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 201.224359][ T1132] hsr_slave_0: left promiscuous mode [ 201.261112][ T1132] hsr_slave_1: left promiscuous mode [ 201.264279][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.315126][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.408935][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 201.502220][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 201.502260][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 201.502284][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 201.680143][ T5592] usb 3-1: USB disconnect, device number 3 [ 203.505109][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 203.505185][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 203.822432][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 203.950992][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 205.426012][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 206.042705][ T6924] netlink: 80 bytes leftover after parsing attributes in process `syz.0.374'. [ 213.095322][ T6333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.262612][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.276782][ T6333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.307339][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.316162][ T6333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.429876][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.433958][ T6333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.589612][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.085550][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.228529][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.290489][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.290635][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.372907][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.373035][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.940552][ T7148] netlink: 148 bytes leftover after parsing attributes in process `syz.3.448'. [ 214.944627][ T7149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.447'. [ 216.518549][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.459'. [ 217.037332][ T7201] netlink: 244 bytes leftover after parsing attributes in process `syz.3.464'. [ 217.062545][ T7201] unsupported nlmsg_type 40 [ 217.304907][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.623258][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.472'. [ 218.958753][ T7242] netlink: 148 bytes leftover after parsing attributes in process `syz.2.478'. [ 219.797619][ T6333] veth0_vlan: entered promiscuous mode [ 219.874633][ T6333] veth1_vlan: entered promiscuous mode [ 220.150718][ T6333] veth0_macvtap: entered promiscuous mode [ 220.180706][ T6333] veth1_macvtap: entered promiscuous mode [ 220.276021][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.414361][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.519247][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.519285][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.519311][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.529823][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.292596][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.498'. [ 221.677335][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.677355][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.685547][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 221.685641][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 221.975866][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 221.975950][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 222.045890][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.045909][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.230087][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 222.230155][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 226.283050][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 226.283131][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 227.800703][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 227.800933][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 227.995624][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 228.061002][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 228.415289][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 228.415369][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 229.646923][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 229.646997][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 229.761570][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 229.761660][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 232.902285][ T7608] __nla_validate_parse: 6 callbacks suppressed [ 232.902325][ T7608] netlink: 80 bytes leftover after parsing attributes in process `syz.5.607'. [ 236.385528][ T7652] netlink: 'syz.0.625': attribute type 4 has an invalid length. [ 236.401032][ T7652] netlink: 'syz.0.625': attribute type 4 has an invalid length. [ 237.594609][ T7693] netlink: 136 bytes leftover after parsing attributes in process `syz.0.643'. [ 243.061811][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.657'. [ 243.061890][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.657'. [ 245.996397][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'. [ 245.996471][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'. [ 246.524839][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 246.524916][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 246.687086][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 246.687165][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 248.339777][ T146] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.370080][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 251.370195][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 252.439230][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 252.439304][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 252.602950][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 252.603025][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 252.876598][ T7877] random: crng reseeded on system resumption [ 255.719529][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719595][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.233514][ T7947] netlink: 80 bytes leftover after parsing attributes in process `syz.5.737'. [ 263.233599][ T7947] netlink: 80 bytes leftover after parsing attributes in process `syz.5.737'. [ 279.418916][ T6211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 280.490228][ T6211] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 280.491492][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.491533][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.491554][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.492483][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.492522][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.492544][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.493588][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.493655][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.493681][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.494905][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.494952][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.494978][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.496181][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.496230][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.496255][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.497571][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.497617][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.497650][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.546811][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.546867][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.546893][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.558865][ T6211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.558920][ T6211] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.558947][ T6211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.625381][ T6211] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 280.625412][ T6211] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 280.625433][ T6211] usb 6-1: Product: syz [ 280.625447][ T6211] usb 6-1: Manufacturer: syz [ 280.625461][ T6211] usb 6-1: SerialNumber: syz [ 280.922416][ T6211] usb 6-1: config 0 descriptor?? [ 280.956983][ T6211] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 281.336026][ T5714] usb 6-1: USB disconnect, device number 2 [ 281.473983][ T5714] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 281.842042][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.379377][ T8105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.797'. [ 282.379464][ T8105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.797'. [ 282.596510][ T8105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.797'. [ 282.596570][ T8105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.797'. [ 282.955050][ T8105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.797'. [ 282.955138][ T8105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.797'. [ 283.714812][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.803'. [ 288.134869][ T8182] tipc: Started in network mode [ 288.134904][ T8182] tipc: Node identity 1001001, cluster identity 4711 [ 288.134917][ T8182] tipc: Node number set to 16781313 [ 288.918744][ T8211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.840'. [ 288.919103][ T8211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.840'. [ 289.283309][ T8211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.840'. [ 289.283412][ T8211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.840'. [ 289.532675][ T8211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.840'. [ 289.532762][ T8211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.840'. [ 294.048891][ T5597] Bluetooth: hci4: command 0x0406 tx timeout [ 303.315086][ T8559] tipc: Started in network mode [ 303.315106][ T8559] tipc: Node identity 1001001, cluster identity 4711 [ 303.315118][ T8559] tipc: Node number set to 16781313 [ 306.312562][ T8633] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1014'. [ 306.312590][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1014'. [ 310.464403][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1056'. [ 310.464432][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1056'. [ 310.464445][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1056'. [ 316.776667][ T8832] syz.0.1085 (8832) used greatest stack depth: 18408 bytes left [ 317.093622][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.093689][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.218033][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1105'. [ 318.218064][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1105'. [ 320.569772][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 320.569802][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1129'. [ 321.009504][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 321.929015][ T1116] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.312465][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 323.312485][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1157'. [ 326.607600][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 326.607620][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 329.590028][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.626600][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.633009][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.635183][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.635865][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.717511][ T5588] ================================================================== [ 329.717521][ T5588] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 329.717552][ T5588] Read of size 8 at addr ffffc9000f1f3008 by task kworker/u9:3/5588 [ 329.717561][ T5588] [ 329.717577][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.717591][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.717598][ T5588] Workqueue: hci5 hci_rx_work [ 329.717624][ T5588] Call Trace: [ 329.717628][ T5588] [ 329.717633][ T5588] dump_stack_lvl+0xe8/0x150 [ 329.717648][ T5588] print_address_description+0x55/0x1e0 [ 329.717663][ T5588] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 329.717677][ T5588] print_report+0x58/0x70 [ 329.717689][ T5588] kasan_report+0x117/0x150 [ 329.717700][ T5588] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 329.717716][ T5588] __list_del_entry_valid_or_report+0xb5/0x190 [ 329.717731][ T5588] kcov_remote_start+0x295/0x6f0 [ 329.717746][ T5588] hci_rx_work+0x10f/0x1020 [ 329.717759][ T5588] ? process_scheduled_works+0xa20/0x14e0 [ 329.717770][ T5588] process_scheduled_works+0xa8e/0x14e0 [ 329.717786][ T5588] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.717797][ T5588] ? assign_work+0x3cf/0x5d0 [ 329.717808][ T5588] worker_thread+0xa47/0xfb0 [ 329.717824][ T5588] kthread+0x388/0x470 [ 329.717837][ T5588] ? __pfx_worker_thread+0x10/0x10 [ 329.717847][ T5588] ? __pfx_kthread+0x10/0x10 [ 329.717860][ T5588] ret_from_fork+0x514/0xb70 [ 329.717874][ T5588] ? __pfx_ret_from_fork+0x10/0x10 [ 329.717894][ T5588] ? __switch_to+0xc89/0x1420 [ 329.717916][ T5588] ? __pfx_kthread+0x10/0x10 [ 329.717932][ T5588] ret_from_fork_asm+0x1a/0x30 [ 329.717950][ T5588] [ 329.717953][ T5588] [ 329.717956][ T5588] The buggy address belongs to a vmalloc virtual mapping [ 329.717966][ T5588] Memory state around the buggy address: [ 329.717972][ T5588] ffffc9000f1f2f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.717978][ T5588] ffffc9000f1f2f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.717987][ T5588] >ffffc9000f1f3000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.717992][ T5588] ^ [ 329.717997][ T5588] ffffc9000f1f3080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.718003][ T5588] ffffc9000f1f3100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.718008][ T5588] ================================================================== [ 329.718039][ T5588] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 329.718047][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.718058][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.718064][ T5588] Workqueue: hci5 hci_rx_work [ 329.718077][ T5588] Call Trace: [ 329.718080][ T5588] [ 329.718084][ T5588] vpanic+0x56c/0xa60 [ 329.718099][ T5588] ? __pfx_vpanic+0x10/0x10 [ 329.718112][ T5588] ? __pfx___schedule+0x10/0x10 [ 329.718126][ T5588] panic+0xc5/0xd0 [ 329.718139][ T5588] ? __pfx_panic+0x10/0x10 [ 329.718154][ T5588] ? preempt_schedule_common+0x82/0xd0 [ 329.718167][ T5588] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 329.718181][ T5588] check_panic_on_warn+0x89/0xb0 [ 329.718196][ T5588] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 329.718210][ T5588] end_report+0x73/0x170 [ 329.718220][ T5588] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 329.718233][ T5588] kasan_report+0x128/0x150 [ 329.718244][ T5588] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 329.718260][ T5588] __list_del_entry_valid_or_report+0xb5/0x190 [ 329.718274][ T5588] kcov_remote_start+0x295/0x6f0 [ 329.718288][ T5588] hci_rx_work+0x10f/0x1020 [ 329.718301][ T5588] ? process_scheduled_works+0xa20/0x14e0 [ 329.718312][ T5588] process_scheduled_works+0xa8e/0x14e0 [ 329.718327][ T5588] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.718339][ T5588] ? assign_work+0x3cf/0x5d0 [ 329.718349][ T5588] worker_thread+0xa47/0xfb0 [ 329.718365][ T5588] kthread+0x388/0x470 [ 329.718377][ T5588] ? __pfx_worker_thread+0x10/0x10 [ 329.718393][ T5588] ? __pfx_kthread+0x10/0x10 [ 329.718406][ T5588] ret_from_fork+0x514/0xb70 [ 329.718422][ T5588] ? __pfx_ret_from_fork+0x10/0x10 [ 329.718446][ T5588] ? __switch_to+0xc89/0x1420 [ 329.718470][ T5588] ? __pfx_kthread+0x10/0x10 [ 329.718493][ T5588] ret_from_fork_asm+0x1a/0x30 [ 329.718524][ T5588] [ 329.718816][ T5588] Kernel Offset: disabled