last executing test programs: 14.345089199s ago: executing program 1 (id=5): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 13.373878294s ago: executing program 1 (id=8): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 11.181681078s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000002680)="e7", 0x1) 9.652275079s ago: executing program 2 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0, 0x50, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002dbd70027100c15821000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 7.052288963s ago: executing program 1 (id=17): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r2) 7.013115924s ago: executing program 2 (id=18): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6.900293499s ago: executing program 3 (id=19): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 5.857861648s ago: executing program 1 (id=20): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.838384934s ago: executing program 0 (id=21): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.581913047s ago: executing program 0 (id=22): sync() 5.274338139s ago: executing program 3 (id=23): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a0000"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mq_open(&(0x7f0000000000)='/dev/ptp0\x00', 0x800, 0x100, 0x0) syz_open_dev$loop(0x0, 0xb8a, 0x18b80) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) mq_timedsend(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.249216183s ago: executing program 2 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 5.154571262s ago: executing program 1 (id=25): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000002680)="e7", 0x1) 3.959539947s ago: executing program 2 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0, 0x50, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002dbd70027100c15821000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 3.444769473s ago: executing program 3 (id=27): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c40)=""/102376, 0x18fe8) syz_pidfd_open(0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 3.395750883s ago: executing program 0 (id=28): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) getdents64(r3, &(0x7f0000000200)=""/50, 0x32) getdents(r3, 0xfffffffffffffffd, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944"], 0xfdef) 2.957253295s ago: executing program 3 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.754765819s ago: executing program 0 (id=30): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xffe, 0x8, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.574971469s ago: executing program 2 (id=31): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) close(r2) 1.39900004s ago: executing program 0 (id=32): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 426.859495ms ago: executing program 2 (id=33): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 426.262604ms ago: executing program 3 (id=34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 281.583843ms ago: executing program 0 (id=35): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a000000"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mq_open(&(0x7f0000000000)='/dev/ptp0\x00', 0x800, 0x100, 0x0) syz_open_dev$loop(0x0, 0xb8a, 0x18b80) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) mq_timedsend(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=36): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 63.977472][ T5752] cgroup: Unknown subsys name 'net' [ 64.113268][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.524909][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.021552][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.030369][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.038699][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.047276][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.055062][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.064055][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.066674][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.080071][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.087834][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.095420][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.104522][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.105125][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.118936][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.126350][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.134148][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.143725][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.150860][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.150936][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.166514][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.166636][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.182408][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.186562][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.198356][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.208874][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.612667][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.627625][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 67.732058][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 67.751819][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.814627][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.822696][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.830161][ T5765] bridge_slave_0: entered allmulticast mode [ 67.837106][ T5765] bridge_slave_0: entered promiscuous mode [ 67.873504][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.880802][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.888235][ T5765] bridge_slave_1: entered allmulticast mode [ 67.894879][ T5765] bridge_slave_1: entered promiscuous mode [ 67.915000][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.922243][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.929489][ T5763] bridge_slave_0: entered allmulticast mode [ 67.937013][ T5763] bridge_slave_0: entered promiscuous mode [ 67.971107][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.978564][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.985730][ T5763] bridge_slave_1: entered allmulticast mode [ 67.992941][ T5763] bridge_slave_1: entered promiscuous mode [ 68.006398][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.046852][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.063900][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.101621][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.111036][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.119365][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.126838][ T5766] bridge_slave_0: entered allmulticast mode [ 68.133472][ T5766] bridge_slave_0: entered promiscuous mode [ 68.149246][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.156568][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.163722][ T5764] bridge_slave_0: entered allmulticast mode [ 68.173483][ T5764] bridge_slave_0: entered promiscuous mode [ 68.181103][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.188529][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.195666][ T5764] bridge_slave_1: entered allmulticast mode [ 68.202762][ T5764] bridge_slave_1: entered promiscuous mode [ 68.219262][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.227335][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.234444][ T5766] bridge_slave_1: entered allmulticast mode [ 68.242602][ T5766] bridge_slave_1: entered promiscuous mode [ 68.258904][ T5765] team0: Port device team_slave_0 added [ 68.280165][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.307752][ T5765] team0: Port device team_slave_1 added [ 68.315728][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.344041][ T5763] team0: Port device team_slave_0 added [ 68.372585][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.384288][ T5763] team0: Port device team_slave_1 added [ 68.402174][ T5766] team0: Port device team_slave_0 added [ 68.410288][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.446800][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.453752][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.479931][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.493476][ T5766] team0: Port device team_slave_1 added [ 68.519735][ T5764] team0: Port device team_slave_0 added [ 68.545882][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.552964][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.580049][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.600778][ T5764] team0: Port device team_slave_1 added [ 68.617447][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.624394][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.650690][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.663002][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.670198][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.696886][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.723370][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.732712][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.761160][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.773044][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.782649][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.809158][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.838365][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.845330][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.871479][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.908517][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.915497][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.944116][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.969026][ T5765] hsr_slave_0: entered promiscuous mode [ 68.975759][ T5765] hsr_slave_1: entered promiscuous mode [ 69.011735][ T5766] hsr_slave_0: entered promiscuous mode [ 69.020926][ T5766] hsr_slave_1: entered promiscuous mode [ 69.027180][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.035357][ T5766] Cannot create hsr debugfs directory [ 69.056219][ T5763] hsr_slave_0: entered promiscuous mode [ 69.062562][ T5763] hsr_slave_1: entered promiscuous mode [ 69.071006][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.078670][ T5763] Cannot create hsr debugfs directory [ 69.173146][ T5764] hsr_slave_0: entered promiscuous mode [ 69.179509][ T5764] hsr_slave_1: entered promiscuous mode [ 69.185609][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.193880][ T5764] Cannot create hsr debugfs directory [ 69.257030][ T5771] Bluetooth: hci2: command tx timeout [ 69.262760][ T5771] Bluetooth: hci3: command tx timeout [ 69.269029][ T5773] Bluetooth: hci0: command tx timeout [ 69.274652][ T5773] Bluetooth: hci1: command tx timeout [ 69.505540][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.522522][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.532290][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.541994][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.607879][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.618851][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.650665][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.662060][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.769372][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.789894][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.800678][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.810654][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.834116][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.908418][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.915298][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.938784][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.946342][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.955752][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.972561][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.000928][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.021400][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.029115][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.045534][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.140538][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.171758][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.178880][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.189348][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.196538][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.248560][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.354680][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.380527][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.411159][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.418349][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.458069][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.507243][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.514402][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.531069][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.538271][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.554478][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.561685][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.610908][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.733334][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.767813][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.850301][ T5765] veth0_vlan: entered promiscuous mode [ 70.888961][ T5765] veth1_vlan: entered promiscuous mode [ 70.905428][ T5766] veth0_vlan: entered promiscuous mode [ 70.943094][ T5766] veth1_vlan: entered promiscuous mode [ 70.958792][ T5765] veth0_macvtap: entered promiscuous mode [ 71.012975][ T5765] veth1_macvtap: entered promiscuous mode [ 71.054443][ T5766] veth0_macvtap: entered promiscuous mode [ 71.082747][ T5766] veth1_macvtap: entered promiscuous mode [ 71.121275][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.140511][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.151582][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.163853][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.175563][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.190896][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.203840][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.214509][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.226991][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.239359][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248849][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.258376][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.267161][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.291495][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.300994][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.312736][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.321727][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.336729][ T5771] Bluetooth: hci3: command tx timeout [ 71.338604][ T5084] Bluetooth: hci2: command tx timeout [ 71.342139][ T5777] Bluetooth: hci0: command tx timeout [ 71.355302][ T5773] Bluetooth: hci1: command tx timeout [ 71.378995][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.454532][ T5763] veth0_vlan: entered promiscuous mode [ 71.528543][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.545155][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.574097][ T5764] veth0_vlan: entered promiscuous mode [ 71.582881][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.583879][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.589829][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.608461][ T5763] veth1_vlan: entered promiscuous mode [ 71.611693][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.642933][ T5764] veth1_vlan: entered promiscuous mode [ 71.698606][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.711638][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.719659][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.727960][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.745638][ T5764] veth0_macvtap: entered promiscuous mode [ 71.781070][ T5764] veth1_macvtap: entered promiscuous mode [ 71.815121][ T5763] veth0_macvtap: entered promiscuous mode [ 71.852707][ T5763] veth1_macvtap: entered promiscuous mode [ 71.892694][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.916319][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.930070][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.941666][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.954433][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.008585][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.024869][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.047094][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.058709][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.082936][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.454354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.572694][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.581562][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.643812][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.655029][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.703715][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.760699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.769521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.803705][ T5833] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 72.806499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.820128][ T5810] IPVS: starting estimator thread 0... [ 72.836975][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.100098][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.293332][ T5839] IPVS: using max 16 ests per chain, 38400 per kthread [ 73.456418][ T5773] Bluetooth: hci1: command tx timeout [ 73.462027][ T5773] Bluetooth: hci3: command tx timeout [ 73.466989][ T5771] Bluetooth: hci2: command tx timeout [ 73.472847][ T5771] Bluetooth: hci0: command tx timeout [ 73.493127][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.514805][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.546297][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.588335][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.728149][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.039882][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.064383][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 74.104830][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.115355][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.194250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.784473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.808465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.808677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.013577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.116144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.623236][ T5084] Bluetooth: hci0: command tx timeout [ 75.626230][ T5777] Bluetooth: hci1: command tx timeout [ 75.629201][ T5084] Bluetooth: hci3: command tx timeout [ 75.634734][ T5771] Bluetooth: hci2: command tx timeout [ 75.648743][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.673888][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.690240][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.794407][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.826527][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.835990][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.871219][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.948460][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.959013][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.053417][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.078499][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.146616][ T5153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.164740][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.179795][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.259608][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.276526][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.348288][ T5153] usb 2-1: Using ep0 maxpacket: 8 [ 76.536664][ T5153] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 76.545755][ T5153] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 76.558725][ T5153] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.569019][ T5153] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 76.580855][ T5153] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 76.591493][ T5153] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.658338][ T5862] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.220508][ T5153] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.236371][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.187252][ T5872] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 78.872206][ T5153] usb 2-1: usb_control_msg returned -32 [ 78.901448][ T5153] usbtmc 2-1:16.0: can't read capabilities [ 79.106617][ T5153] usb 2-1: USB disconnect, device number 2 [ 79.335610][ T8] IPVS: starting estimator thread 0... [ 79.351264][ T5875] netlink: 'syz.2.13': attribute type 27 has an invalid length. [ 79.559121][ T5876] IPVS: using max 19 ests per chain, 45600 per kthread [ 81.278213][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 81.825419][ T42] cfg80211: failed to load regulatory.db [ 82.639252][ T5907] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 82.976091][ C0] sched: RT throttling activated [ 83.726361][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.956347][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 84.003868][ T5916] netlink: 'syz.2.26': attribute type 27 has an invalid length. [ 84.026988][ T42] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 84.048408][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 84.061316][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.071845][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 84.083562][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 84.094564][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.247711][ T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.068730][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.369756][ T42] usb 2-1: usb_control_msg returned -32 [ 85.375578][ T42] usbtmc 2-1:16.0: can't read capabilities [ 85.433483][ T5925] input: syz0 as /devices/virtual/input/input7 [ 85.590518][ T42] usb 2-1: USB disconnect, device number 3 [ 87.314024][ T5943] ================================================================== [ 87.322131][ T5943] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 87.329806][ T5943] Read of size 8 at addr ffff8880262f1218 by task syz.0.35/5943 [ 87.337441][ T5943] [ 87.339783][ T5943] CPU: 0 PID: 5943 Comm: syz.0.35 Not tainted syzkaller #0 [ 87.346983][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.357067][ T5943] Call Trace: [ 87.360362][ T5943] [ 87.363300][ T5943] dump_stack_lvl+0x18c/0x250 [ 87.367994][ T5943] ? __lock_acquire+0x7d40/0x7d40 [ 87.373054][ T5943] ? show_regs_print_info+0x20/0x20 [ 87.378270][ T5943] ? load_image+0x400/0x400 [ 87.382784][ T5943] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 87.388256][ T5943] ? __virt_addr_valid+0x18c/0x540 [ 87.393382][ T5943] ? __virt_addr_valid+0x469/0x540 [ 87.398777][ T5943] print_report+0xa8/0x210 [ 87.403216][ T5943] ? dvb_device_open+0xca/0x370 [ 87.408074][ T5943] kasan_report+0x117/0x150 [ 87.412630][ T5943] ? chrdev_open+0x3e3/0x6a0 [ 87.417240][ T5943] ? dvb_device_open+0xca/0x370 [ 87.422109][ T5943] dvb_device_open+0xca/0x370 [ 87.426805][ T5943] ? do_raw_spin_unlock+0x121/0x230 [ 87.432021][ T5943] chrdev_open+0x5cc/0x6a0 [ 87.436446][ T5943] ? cd_forget+0x160/0x160 [ 87.440871][ T5943] ? fsnotify_perm+0x3ed/0x5e0 [ 87.445910][ T5943] ? cd_forget+0x160/0x160 [ 87.450347][ T5943] do_dentry_open+0x8c6/0x1500 [ 87.455131][ T5943] path_openat+0x27f1/0x3230 [ 87.459734][ T5943] ? do_sys_openat2+0xda/0x1d0 [ 87.464511][ T5943] ? verify_lock_unused+0x140/0x140 [ 87.469718][ T5943] ? do_filp_open+0x430/0x430 [ 87.474406][ T5943] ? __virt_addr_valid+0x18c/0x540 [ 87.479529][ T5943] do_filp_open+0x1f5/0x430 [ 87.484038][ T5943] ? vfs_tmpfile+0x490/0x490 [ 87.488654][ T5943] ? _raw_spin_unlock+0x28/0x40 [ 87.493512][ T5943] ? alloc_fd+0x58f/0x630 [ 87.497857][ T5943] do_sys_openat2+0x134/0x1d0 [ 87.502634][ T5943] ? do_sys_open+0xe0/0xe0 [ 87.507071][ T5943] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 87.513065][ T5943] ? lock_chain_count+0x20/0x20 [ 87.518013][ T5943] __x64_sys_openat+0x139/0x160 [ 87.522877][ T5943] do_syscall_64+0x55/0xa0 [ 87.527305][ T5943] ? clear_bhb_loop+0x40/0x90 [ 87.531995][ T5943] ? clear_bhb_loop+0x40/0x90 [ 87.536777][ T5943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.542684][ T5943] RIP: 0033:0x7efea175cfce [ 87.547225][ T5943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.566846][ T5943] RSP: 002b:00007efea263db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.575275][ T5943] RAX: ffffffffffffffda RBX: 00007efea263e6c0 RCX: 00007efea175cfce [ 87.583264][ T5943] RDX: 0000000000000e82 RSI: 00007efea263dc00 RDI: ffffffffffffff9c [ 87.591249][ T5943] RBP: 00007efea263dc00 R08: 0000000000000000 R09: 0000000000000000 [ 87.599235][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 87.607219][ T5943] R13: 00007efea1a16308 R14: 00007efea1a16270 R15: 00007ffec1653878 [ 87.615215][ T5943] [ 87.618242][ T5943] [ 87.620564][ T5943] Allocated by task 1: [ 87.624627][ T5943] kasan_set_track+0x4e/0x70 [ 87.629235][ T5943] __kasan_kmalloc+0x8f/0xa0 [ 87.633832][ T5943] dvb_register_device+0x2fd/0x2210 [ 87.639038][ T5943] dvb_register_frontend+0x649/0x930 [ 87.644337][ T5943] vidtv_bridge_probe+0x9ab/0xf80 [ 87.649389][ T5943] platform_probe+0x13b/0x1c0 [ 87.654077][ T5943] really_probe+0x25b/0xb20 [ 87.658582][ T5943] __driver_probe_device+0x18c/0x330 [ 87.663880][ T5943] driver_probe_device+0x4f/0x420 [ 87.669255][ T5943] __driver_attach+0x44e/0x6e0 [ 87.674022][ T5943] bus_for_each_dev+0x235/0x2b0 [ 87.678903][ T5943] bus_add_driver+0x340/0x630 [ 87.683589][ T5943] driver_register+0x23a/0x310 [ 87.688360][ T5943] vidtv_bridge_init+0x3d/0x70 [ 87.693129][ T5943] do_one_initcall+0x242/0x790 [ 87.697899][ T5943] do_initcall_level+0x137/0x1f0 [ 87.702841][ T5943] do_initcalls+0x69/0xd0 [ 87.707176][ T5943] kernel_init_freeable+0x3ed/0x580 [ 87.712386][ T5943] kernel_init+0x1d/0x1c0 [ 87.716726][ T5943] ret_from_fork+0x48/0x80 [ 87.721146][ T5943] ret_from_fork_asm+0x11/0x20 [ 87.725919][ T5943] [ 87.728238][ T5943] Freed by task 5907: [ 87.732210][ T5943] kasan_set_track+0x4e/0x70 [ 87.736808][ T5943] kasan_save_free_info+0x2e/0x50 [ 87.741843][ T5943] ____kasan_slab_free+0x126/0x1e0 [ 87.746961][ T5943] slab_free_freelist_hook+0x130/0x1a0 [ 87.752425][ T5943] __kmem_cache_free+0xba/0x1e0 [ 87.757283][ T5943] dvb_device_open+0x2ee/0x370 [ 87.762062][ T5943] chrdev_open+0x5cc/0x6a0 [ 87.766490][ T5943] do_dentry_open+0x8c6/0x1500 [ 87.771260][ T5943] path_openat+0x27f1/0x3230 [ 87.775857][ T5943] do_filp_open+0x1f5/0x430 [ 87.780361][ T5943] do_sys_openat2+0x134/0x1d0 [ 87.785044][ T5943] __x64_sys_openat+0x139/0x160 [ 87.789902][ T5943] do_syscall_64+0x55/0xa0 [ 87.794332][ T5943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.800229][ T5943] [ 87.802573][ T5943] The buggy address belongs to the object at ffff8880262f1200 [ 87.802573][ T5943] which belongs to the cache kmalloc-256 of size 256 [ 87.816640][ T5943] The buggy address is located 24 bytes inside of [ 87.816640][ T5943] freed 256-byte region [ffff8880262f1200, ffff8880262f1300) [ 87.830362][ T5943] [ 87.832685][ T5943] The buggy address belongs to the physical page: [ 87.839103][ T5943] page:ffffea000098bc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x262f0 [ 87.849267][ T5943] head:ffffea000098bc00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.858208][ T5943] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 87.866638][ T5943] page_type: 0xffffffff() [ 87.870970][ T5943] raw: 00fff00000000840 ffff888017c41b40 0000000000000000 dead000000000001 [ 87.879561][ T5943] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 87.888144][ T5943] page dumped because: kasan: bad access detected [ 87.894550][ T5943] page_owner tracks the page as allocated [ 87.900265][ T5943] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9057909129, free_ts 0 [ 87.919913][ T5943] post_alloc_hook+0x1c1/0x200 [ 87.924697][ T5943] get_page_from_freelist+0x1951/0x19e0 [ 87.930246][ T5943] __alloc_pages+0x1f0/0x460 [ 87.934837][ T5943] alloc_page_interleave+0x24/0x1e0 [ 87.940037][ T5943] alloc_slab_page+0x5d/0x160 [ 87.944715][ T5943] new_slab+0x87/0x2d0 [ 87.948793][ T5943] ___slab_alloc+0xc5d/0x12f0 [ 87.953478][ T5943] __kmem_cache_alloc_node+0x19e/0x250 [ 87.958945][ T5943] __kmalloc+0xa4/0x230 [ 87.963111][ T5943] usb_hcd_submit_urb+0x77b/0x1a80 [ 87.968224][ T5943] usb_start_wait_urb+0x12c/0x4e0 [ 87.973262][ T5943] usb_control_msg+0x233/0x3e0 [ 87.978030][ T5943] usb_get_string+0xa1/0x3c0 [ 87.982631][ T5943] usb_string_sub+0x76/0x420 [ 87.987226][ T5943] usb_string+0x38f/0x760 [ 87.991561][ T5943] usb_cache_string+0x80/0x130 [ 87.996338][ T5943] page_owner free stack trace missing [ 88.001704][ T5943] [ 88.004024][ T5943] Memory state around the buggy address: [ 88.009651][ T5943] ffff8880262f1100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.017723][ T5943] ffff8880262f1180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.025798][ T5943] >ffff8880262f1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.033865][ T5943] ^ [ 88.038715][ T5943] ffff8880262f1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.046787][ T5943] ffff8880262f1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.054848][ T5943] ================================================================== [ 88.075162][ T5943] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.082481][ T5943] CPU: 0 PID: 5943 Comm: syz.0.35 Not tainted syzkaller #0 [ 88.089682][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.099744][ T5943] Call Trace: [ 88.103028][ T5943] [ 88.105972][ T5943] dump_stack_lvl+0x18c/0x250 [ 88.110678][ T5943] ? show_regs_print_info+0x20/0x20 [ 88.115896][ T5943] ? load_image+0x400/0x400 [ 88.120416][ T5943] panic+0x2dc/0x730 [ 88.124321][ T5943] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.130487][ T5943] ? bpf_jit_dump+0xd0/0xd0 [ 88.135006][ T5943] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 88.141033][ T5943] ? _raw_spin_unlock+0x40/0x40 [ 88.145891][ T5943] ? dvb_device_open+0xca/0x370 [ 88.150750][ T5943] check_panic_on_warn+0x84/0xa0 [ 88.155782][ T5943] ? dvb_device_open+0xca/0x370 [ 88.160641][ T5943] end_report+0x6f/0x130 [ 88.164888][ T5943] kasan_report+0x128/0x150 [ 88.169406][ T5943] ? chrdev_open+0x3e3/0x6a0 [ 88.174005][ T5943] ? dvb_device_open+0xca/0x370 [ 88.178868][ T5943] dvb_device_open+0xca/0x370 [ 88.183559][ T5943] ? do_raw_spin_unlock+0x121/0x230 [ 88.188778][ T5943] chrdev_open+0x5cc/0x6a0 [ 88.193201][ T5943] ? cd_forget+0x160/0x160 [ 88.197629][ T5943] ? fsnotify_perm+0x3ed/0x5e0 [ 88.202410][ T5943] ? cd_forget+0x160/0x160 [ 88.206832][ T5943] do_dentry_open+0x8c6/0x1500 [ 88.211618][ T5943] path_openat+0x27f1/0x3230 [ 88.216223][ T5943] ? do_sys_openat2+0xda/0x1d0 [ 88.221003][ T5943] ? verify_lock_unused+0x140/0x140 [ 88.226236][ T5943] ? do_filp_open+0x430/0x430 [ 88.230923][ T5943] ? __virt_addr_valid+0x18c/0x540 [ 88.236054][ T5943] do_filp_open+0x1f5/0x430 [ 88.240571][ T5943] ? vfs_tmpfile+0x490/0x490 [ 88.245175][ T5943] ? _raw_spin_unlock+0x28/0x40 [ 88.250039][ T5943] ? alloc_fd+0x58f/0x630 [ 88.254381][ T5943] do_sys_openat2+0x134/0x1d0 [ 88.259072][ T5943] ? do_sys_open+0xe0/0xe0 [ 88.263500][ T5943] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 88.269489][ T5943] ? lock_chain_count+0x20/0x20 [ 88.274353][ T5943] __x64_sys_openat+0x139/0x160 [ 88.279213][ T5943] do_syscall_64+0x55/0xa0 [ 88.283658][ T5943] ? clear_bhb_loop+0x40/0x90 [ 88.288346][ T5943] ? clear_bhb_loop+0x40/0x90 [ 88.293037][ T5943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.298936][ T5943] RIP: 0033:0x7efea175cfce [ 88.303352][ T5943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.323145][ T5943] RSP: 002b:00007efea263db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.331577][ T5943] RAX: ffffffffffffffda RBX: 00007efea263e6c0 RCX: 00007efea175cfce [ 88.339570][ T5943] RDX: 0000000000000e82 RSI: 00007efea263dc00 RDI: ffffffffffffff9c [ 88.347549][ T5943] RBP: 00007efea263dc00 R08: 0000000000000000 R09: 0000000000000000 [ 88.355609][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 88.363600][ T5943] R13: 00007efea1a16308 R14: 00007efea1a16270 R15: 00007ffec1653878 [ 88.371586][ T5943] [ 88.375008][ T5943] Kernel Offset: disabled [ 88.379317][ T5943] Rebooting in 86400 seconds..