last executing test programs: 4.557645289s ago: executing program 3 (id=4): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}], 0x20) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.316590173s ago: executing program 3 (id=5): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) flock(r1, 0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='#-\x00') ioctl$DVB_DEMUX_DMX_QBUF(r0, 0xc0186f3f, &(0x7f0000000080)={0x1, 0x6, 0x9, 0x8000, 0x8, 0x6f}) flistxattr(r0, &(0x7f00000000c0)=""/181, 0xb5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, r2, 0x3, 0x0, &(0x7f0000000200)=[{0x6, 0x1}, {0x81, 0xf5}, {0x1, 0x9}]}) r3 = open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x1101) sync_file_range(r3, 0x6, 0x2632, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000002c0)={'virt_wifi0\x00', {0x2, 0x4e23, @broadcast}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000000340)=""/199, 0xc7}], 0x2) ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000480)={0x1ff, 0x0, r0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x370b80, 0xc8aaa}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x6, r2, 0x0, r5}) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f0000000640)={0x10000, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000680)={0xb0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}}) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000780)={0x48, 0x9, 0x0, 0x0, 0x9}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in=@empty, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000900)=0xe8) getpeername$packet(r4, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}}, 0x4000000) r8 = memfd_secret(0x80000) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f0000000ac0)={0x4, 0x99, 0x6, 0x7, 0xfffffffa}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000b00)={0x0, 0x4}, &(0x7f0000000b40)=0x8) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000bc0)) 3.136769122s ago: executing program 3 (id=6): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x2, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}]}, 0x58) (async) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x8000039, r4, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001980)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001200330002"], 0xa0}}, 0x0) move_mount(r4, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r2, 0x0, 0x6) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 64) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) close_range(r1, 0xffffffffffffffff, 0x0) 2.943757866s ago: executing program 2 (id=3): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48c0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xe0f02, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000040)='0\x00', 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a300100000005000400"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300"], 0xfe33) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40001) r9 = epoll_create1(0x80000) r10 = fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000005c0)={0x90000010}) ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0x2b7) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 2.430696148s ago: executing program 3 (id=7): r0 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x40, 0x7, 0xa6, 0xe5}, {0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x6}, {0x9, 0x5, 0x7, 0x3, 0x40, 0xf4, 0x6, 0x50}}}}}}]}}, 0x0) syz_usb_disconnect(r0) prctl$PR_SCHED_CORE(0x41, 0x2, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000340)={0x20, 0xd, 0x2, '`o'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.316850632s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@host, 0x3}, 0x1, 0x0, 0x1}) r4 = open$dir(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20100, 0x3) getdents64(r4, &(0x7f0000001880)=""/106, 0x6a) pwritev(r2, &(0x7f0000000580)=[{&(0x7f0000000480)="1c", 0x1}], 0x1, 0xf, 0x8) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$alg(r5, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="1034bc95e1d2139b77442e1c27fc80d9cb642846c74c2f53eaaa0ce4055b20b9ab193e690f549550a5476a02e6d6ddcfce3056c62bcefe8d00db8b8ecbd0295c2c6a1957fbc8d7ff9a1fd165bd01d0cc7094c14b8bed22214a5437c376948051797b8ff5f08d2787fcc1f86678c2ee805c807b323314b9f82887363ec08b5e0090fc7771c674068bc3a26e0b3287116f9f8660cd51883c70eb3b93eccc3dd1b181c022aa435f13e3aeb4fb72a55d568ff575a3beda7257e79ef86f8b411d0fb7e150", 0xc2}, {&(0x7f00000002c0)="3b40ef76c0eb94da7424f03275681227214274be8b24d107f743a6b75658ef527c7406f2923703a8dacf63f73fbc709fbbc5487aa7f92aa5d1493cc18a5988362f48895e68b18b3a83f6065442227cf5e6919f29e82fd6997c28447a547c553b49a47dc14ea7509cc5640a9160ebb326ef845878b66c9e2591fbb6c2922afcf81b8638e49f5773ac7198bec3287d9de71da9f8faf9f02de41dbfb5198429f867a4c8fb6b837234d30f702c27136bf758957c60aa996ba35a6fff2b40ffb68a7f750f09d2bb1ee215", 0xc8}, {&(0x7f00000003c0)="66559df272716e723689a4f36b2d8bac4c229f613f633650d33c70ebec043900306300249647c6683fd4435c01de8da036ea49b52b021bc6852e67", 0x3b}, {&(0x7f0000000400)="2797c0f79fde0e7246fa618fe35943290106b5b5c5e18cdd2998621b7158f0a67abc9e84480468f7ecce518f8985bf4c95a57ca8ea93bfc6e4dbe494a80ce2d49314cc0ad7bf6326a20b9575430afa58a6ed4eccbb7b341c6e47935dfc3e749ce21a2c2bc8cd", 0x66}, {&(0x7f0000000680)="f615d01ca91059ce8153920d993b4843a0a631c51131ba2e543f6fc5234afe7fce5c58cd335f7833a9f380be5f6ffab8213c2815172964f68a1941cbf04596f8b2a678687790f4c81b46657c7a4cede621a8149c517a373ece5b97c5e2587d0210e45d49eab33e1e4aa580ad98bb4970099108ee61f53cf9fc400e6d2a4e618481a40a00e7806c55b27bc058f0b2bdcec329383bbc1ef05fea20b21d7cc9e5fa434dbc6c276ec666b7943868665215fd0a9dcf9b15e05599a18d16821669c94d14d3f5083e96c157fc7dc12f8c637bdb9b824d022ee315db8b1b1f67c50517ae82d35320e9", 0xe5}], 0x5, 0x0, 0x0, 0x4004000}], 0x1, 0x4004) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.643174286s ago: executing program 2 (id=8): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r2 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x24008055) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/121, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r5 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x1016}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5b0000000001050500000000000000000a00000018ba9e801400018508000100ac1414bb08000200ac2514aa"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01ab8f9094028c002abc7000ff00000008000b00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44084) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x1) 1.58970927s ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{}, {0x0, "ad44abb9fe57a899"}}}}, 0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) landlock_restrict_self(0xffffffffffffffff, 0xc) 0s ago: executing program 1 (id=9): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000010000000000000000080000000000000000000000000008001f0003"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 79.128051][ T5600] cgroup: Unknown subsys name 'net' [ 79.369100][ T5600] cgroup: Unknown subsys name 'cpuset' [ 79.445117][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.353261][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.765745][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.771718][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.772507][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.774194][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.777278][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.892008][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.902658][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.903513][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.905375][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.922038][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.938056][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.948704][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.977707][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.978712][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.980455][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.980971][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.988357][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.988815][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.990794][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.991222][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.875981][ T4931] Bluetooth: hci0: command tx timeout [ 85.952304][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.952520][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.952689][ T5613] bridge_slave_0: entered allmulticast mode [ 85.957224][ T5613] bridge_slave_0: entered promiscuous mode [ 86.005038][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.005359][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.005651][ T5613] bridge_slave_1: entered allmulticast mode [ 86.009378][ T5613] bridge_slave_1: entered promiscuous mode [ 86.024416][ T4931] Bluetooth: hci3: command tx timeout [ 86.105311][ T4931] Bluetooth: hci1: command tx timeout [ 86.105442][ T4931] Bluetooth: hci2: command tx timeout [ 86.166958][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.212432][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.237035][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.237335][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.237496][ T5618] bridge_slave_0: entered allmulticast mode [ 86.239533][ T5618] bridge_slave_0: entered promiscuous mode [ 86.300011][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.300426][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.300655][ T5618] bridge_slave_1: entered allmulticast mode [ 86.305754][ T5618] bridge_slave_1: entered promiscuous mode [ 86.339936][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.340249][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.343698][ T5617] bridge_slave_0: entered allmulticast mode [ 86.347033][ T5617] bridge_slave_0: entered promiscuous mode [ 86.385768][ T5613] team0: Port device team_slave_0 added [ 86.485908][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.486200][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.486385][ T5617] bridge_slave_1: entered allmulticast mode [ 86.488364][ T5617] bridge_slave_1: entered promiscuous mode [ 86.536220][ T5613] team0: Port device team_slave_1 added [ 86.560814][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.620797][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.658591][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.678003][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.678186][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.678380][ T5620] bridge_slave_0: entered allmulticast mode [ 86.680418][ T5620] bridge_slave_0: entered promiscuous mode [ 86.689613][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.689630][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.689654][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.699351][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.723700][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.724077][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.729739][ T5620] bridge_slave_1: entered allmulticast mode [ 86.733689][ T5620] bridge_slave_1: entered promiscuous mode [ 86.743571][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.743587][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.743609][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.818008][ T5618] team0: Port device team_slave_0 added [ 86.873187][ T5618] team0: Port device team_slave_1 added [ 86.898543][ T5617] team0: Port device team_slave_0 added [ 86.920784][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.935147][ T5617] team0: Port device team_slave_1 added [ 86.958781][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.991586][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.991599][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.991613][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.057735][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.057748][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.057763][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.103785][ T9] cfg80211: failed to load regulatory.db [ 87.157493][ T5613] hsr_slave_0: entered promiscuous mode [ 87.158942][ T5613] hsr_slave_1: entered promiscuous mode [ 87.162416][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.162431][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.162458][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.228695][ T5620] team0: Port device team_slave_0 added [ 87.233862][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.233879][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.233904][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.289563][ T5620] team0: Port device team_slave_1 added [ 87.492018][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.492030][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.492045][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.830439][ T5618] hsr_slave_0: entered promiscuous mode [ 87.831715][ T5618] hsr_slave_1: entered promiscuous mode [ 87.832819][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 87.832893][ T5618] Cannot create hsr debugfs directory [ 87.835818][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.835831][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.835853][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.932956][ T5617] hsr_slave_0: entered promiscuous mode [ 87.934641][ T5617] hsr_slave_1: entered promiscuous mode [ 87.936275][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 87.936298][ T5617] Cannot create hsr debugfs directory [ 87.945179][ T5616] Bluetooth: hci0: command tx timeout [ 88.098856][ T5620] hsr_slave_0: entered promiscuous mode [ 88.100796][ T5620] hsr_slave_1: entered promiscuous mode [ 88.101791][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 88.101817][ T5620] Cannot create hsr debugfs directory [ 88.104723][ T5616] Bluetooth: hci3: command tx timeout [ 88.185504][ T5616] Bluetooth: hci2: command tx timeout [ 88.185538][ T5616] Bluetooth: hci1: command tx timeout [ 88.780153][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.830338][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.835781][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.882808][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.891055][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.927629][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.949227][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.982812][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.134817][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.158074][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.162821][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.190080][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.202687][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.241042][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.271754][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.299028][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.470240][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.513052][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.521108][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.563338][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.574102][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.619708][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.659718][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.701095][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.850311][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.889104][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.911221][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.938310][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.942744][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.964669][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.972006][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.999823][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.025323][ T4931] Bluetooth: hci0: command tx timeout [ 90.083527][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.194868][ T4931] Bluetooth: hci3: command tx timeout [ 90.218289][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.264956][ T5616] Bluetooth: hci2: command tx timeout [ 90.265054][ T4931] Bluetooth: hci1: command tx timeout [ 90.276838][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.277583][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.316916][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.370562][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.370693][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.463380][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.513533][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.513966][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.555912][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.657278][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.658494][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.745994][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.828944][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.834018][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.835196][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.914089][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.922502][ T1794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.061762][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.168553][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.168697][ T1794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.240042][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.240232][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.115413][ T4931] Bluetooth: hci0: command tx timeout [ 92.246993][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.264503][ T4931] Bluetooth: hci3: command tx timeout [ 92.344471][ T4931] Bluetooth: hci1: command tx timeout [ 92.344507][ T4931] Bluetooth: hci2: command tx timeout [ 92.808561][ T5613] veth0_vlan: entered promiscuous mode [ 92.899123][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.910340][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.929286][ T5613] veth1_vlan: entered promiscuous mode [ 93.128475][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.198661][ T5613] veth0_macvtap: entered promiscuous mode [ 93.248773][ T5613] veth1_macvtap: entered promiscuous mode [ 93.269339][ T5617] veth0_vlan: entered promiscuous mode [ 93.296378][ T5618] veth0_vlan: entered promiscuous mode [ 93.346601][ T5617] veth1_vlan: entered promiscuous mode [ 93.371530][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.391761][ T5618] veth1_vlan: entered promiscuous mode [ 93.422452][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.541506][ T3362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.553990][ T5620] veth0_vlan: entered promiscuous mode [ 93.558259][ T3362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.581952][ T3362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601722][ T3362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.687140][ T5620] veth1_vlan: entered promiscuous mode [ 93.708698][ T5617] veth0_macvtap: entered promiscuous mode [ 93.815511][ T5617] veth1_macvtap: entered promiscuous mode [ 93.904047][ T5618] veth0_macvtap: entered promiscuous mode [ 93.979170][ T5618] veth1_macvtap: entered promiscuous mode [ 94.083868][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.109382][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.109405][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.151067][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.152226][ T5620] veth0_macvtap: entered promiscuous mode [ 94.179613][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.237448][ T5620] veth1_macvtap: entered promiscuous mode [ 94.241731][ T196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270640][ T196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.279266][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.295238][ T196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.317217][ T196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.349265][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.349287][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.350380][ T1319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.417671][ T1319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472568][ T196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.498486][ T196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570942][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.767806][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.057269][ T196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.161520][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.278640][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312978][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.339534][ T5769] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.391910][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.391931][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.696942][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.696964][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.996742][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.996762][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.161589][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.161610][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.386919][ T5775] process 'syz.3.6' launched '/dev/fd/7' with NULL argv: empty string added [ 96.418312][ T1794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.418335][ T1794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.892361][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.892385][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.009052][ T5778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.043555][ T5778] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 97.043579][ T5778] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 98.347874][ T5790] Zero length message leads to an empty skb [ 98.534666][ T5703] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.578567][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.620716][ T5791] Bluetooth: MGMT ver 1.23 [ 98.814082][ T5703] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 98.814114][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.814134][ T5703] usb 1-1: Product: syz [ 98.814147][ T5703] usb 1-1: Manufacturer: syz [ 98.814160][ T5703] usb 1-1: SerialNumber: syz [ 98.849036][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 98.849066][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.849084][ T10] usb 4-1: Product: syz [ 98.849096][ T10] usb 4-1: Manufacturer: syz [ 98.849109][ T10] usb 4-1: SerialNumber: syz [ 99.023257][ T5703] usb 1-1: config 0 descriptor?? [ 99.078844][ T10] usb 4-1: config 0 descriptor?? [ 99.310218][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 99.797530][ T5703] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 99.797562][ T5703] f81604 1-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 99.797602][ T5703] f81604 1-1:0.0: probe with driver f81604 failed with error -121 [ 99.970464][ T10] usb 4-1: failed to send control message: -71 [ 99.970527][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 100.147681][ T10] usb 4-1: USB disconnect, device number 2 [ 100.187187][ T5787] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.187215][ T5787] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 100.191128][ C1] ------------[ cut here ]------------ [ 100.191143][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 100.191180][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd67/0x1010, CPU#1: ktimers/1/30 [ 100.191215][ C1] Modules linked in: [ 100.191232][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.191252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.191262][ C1] RIP: 0010:__queue_work+0xd87/0x1010 [ 100.191284][ C1] Code: 01 00 00 4c 8d 35 49 da 21 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 b3 ee a0 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 11 a8 [ 100.191297][ C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010046 [ 100.191311][ C1] RAX: 1ffff11004d4c953 RBX: 0000000000000008 RCX: ffff88801dec1ec0 [ 100.191323][ C1] RDX: ffff88803438d168 RSI: ffffffff8a259bd0 RDI: ffffffff8faf5ca0 [ 100.191337][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 100.191349][ C1] R10: dffffc0000000000 R11: ffffffff818d88d0 R12: dffffc0000000000 [ 100.191363][ C1] R13: ffff888026a64a98 R14: ffffffff8faf5ca0 R15: ffff88803438d168 [ 100.191377][ C1] FS: 0000000000000000(0000) GS:ffff888125dd3000(0000) knlGS:0000000000000000 [ 100.191392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.191406][ C1] CR2: 000055740907ccd0 CR3: 000000003fa60000 CR4: 00000000003526f0 [ 100.191425][ C1] Call Trace: [ 100.191433][ C1] [ 100.191445][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.191484][ C1] call_timer_fn+0x192/0x5e0 [ 100.191506][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.191530][ C1] ? call_timer_fn+0xd4/0x5e0 [ 100.191549][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 100.191579][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 100.191605][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.191635][ C1] __run_timer_base+0x764/0x9f0 [ 100.191680][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 100.191714][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 100.191751][ C1] run_timer_softirq+0xb7/0x170 [ 100.191783][ C1] handle_softirqs+0x1de/0x6d0 [ 100.191820][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 100.191842][ C1] run_ktimerd+0x69/0x100 [ 100.191869][ C1] smpboot_thread_fn+0x541/0xa50 [ 100.191899][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 100.191937][ C1] kthread+0x388/0x470 [ 100.191969][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 100.191995][ C1] ? __pfx_kthread+0x10/0x10 [ 100.192026][ C1] ret_from_fork+0x514/0xb70 [ 100.192055][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 100.192078][ C1] ? __switch_to+0xc79/0x1410 [ 100.192103][ C1] ? __pfx_kthread+0x10/0x10 [ 100.192133][ C1] ret_from_fork_asm+0x1a/0x30 [ 100.192184][ C1] [ 100.192195][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.192210][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.192233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.192243][ C1] Call Trace: [ 100.192251][ C1] [ 100.192260][ C1] vpanic+0x56c/0xa60 [ 100.192292][ C1] ? __pfx__printk+0x10/0x10 [ 100.192316][ C1] ? __pfx_vpanic+0x10/0x10 [ 100.192344][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 100.192376][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 100.192482][ C1] panic+0xc5/0xd0 [ 100.192543][ C1] ? __pfx_panic+0x10/0x10 [ 100.192587][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 100.192625][ C1] __warn+0x315/0x4c0 [ 100.192655][ C1] ? __queue_work+0xd67/0x1010 [ 100.192686][ C1] ? __queue_work+0xd67/0x1010 [ 100.192715][ C1] __report_bug+0x29a/0x540 [ 100.192743][ C1] ? call_timer_fn+0x192/0x5e0 [ 100.192763][ C1] ? __run_timer_base+0x764/0x9f0 [ 100.192791][ C1] ? run_timer_softirq+0xb7/0x170 [ 100.192827][ C1] ? __queue_work+0xd67/0x1010 [ 100.192853][ C1] ? __pfx___report_bug+0x10/0x10 [ 100.192879][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 100.192915][ C1] ? register_lock_class+0x31/0x2e0 [ 100.192952][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 100.192984][ C1] report_bug_entry+0x19a/0x290 [ 100.193013][ C1] ? __queue_work+0xd87/0x1010 [ 100.193036][ C1] ? __queue_work+0xd8c/0x1010 [ 100.193071][ C1] handle_bug+0xce/0x200 [ 100.193100][ C1] exc_invalid_op+0x1a/0x50 [ 100.193415][ C1] asm_exc_invalid_op+0x1a/0x20 [ 100.193453][ C1] RIP: 0010:__queue_work+0xd87/0x1010 [ 100.193482][ C1] Code: 01 00 00 4c 8d 35 49 da 21 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 b3 ee a0 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 11 a8 [ 100.193499][ C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010046 [ 100.193519][ C1] RAX: 1ffff11004d4c953 RBX: 0000000000000008 RCX: ffff88801dec1ec0 [ 100.193536][ C1] RDX: ffff88803438d168 RSI: ffffffff8a259bd0 RDI: ffffffff8faf5ca0 [ 100.193551][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 100.193565][ C1] R10: dffffc0000000000 R11: ffffffff818d88d0 R12: dffffc0000000000 [ 100.193581][ C1] R13: ffff888026a64a98 R14: ffffffff8faf5ca0 R15: ffff88803438d168 [ 100.193603][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.193650][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 100.193689][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.193726][ C1] call_timer_fn+0x192/0x5e0 [ 100.193746][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.193770][ C1] ? call_timer_fn+0xd4/0x5e0 [ 100.193789][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 100.193820][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 100.193844][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.193874][ C1] __run_timer_base+0x764/0x9f0 [ 100.193920][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 100.193955][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 100.193990][ C1] run_timer_softirq+0xb7/0x170 [ 100.194021][ C1] handle_softirqs+0x1de/0x6d0 [ 100.194057][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 100.194083][ C1] run_ktimerd+0x69/0x100 [ 100.194120][ C1] smpboot_thread_fn+0x541/0xa50 [ 100.194148][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 100.194182][ C1] kthread+0x388/0x470 [ 100.194217][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 100.194241][ C1] ? __pfx_kthread+0x10/0x10 [ 100.194271][ C1] ret_from_fork+0x514/0xb70 [ 100.194300][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 100.194325][ C1] ? __switch_to+0xc79/0x1410 [ 100.194349][ C1] ? __pfx_kthread+0x10/0x10 [ 100.194378][ C1] ret_from_fork_asm+0x1a/0x30 [ 100.194423][ C1] [ 100.194824][ C1] Kernel Offset: disabled