last executing test programs: 2.370645856s ago: executing program 4 (id=5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0xc9, &(0x7f0000000580)=[{&(0x7f0000000080)='K', 0x1}, {&(0x7f0000000180)="e3", 0x1}], 0x2}}], 0x1, 0x44954) 2.162009492s ago: executing program 4 (id=6): syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) (fail_nth: 6) 2.009491135s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000001340)=""/185, 0xb9}, {&(0x7f00000002c0)=""/52, 0x34}], 0x4, &(0x7f0000001440)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)=""/232, 0xe8}, {&(0x7f0000002540)=""/169, 0xa9}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000005500)=""/4095, 0xfff}], 0x4, &(0x7f0000003680)=""/84, 0x54}, 0x1898}], 0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8}, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x7c61d607c6d94c11, 0x0) r4 = socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000340)={r3, 0x2, {0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x12, 0xd, 0x1, "8290c4733fbc3b5ba848112544e1558555111ab276518138ad49c116926a0bf67b6dbc2cd46117742aa69fafd5682a63f1385e3bc45c0c189b2f387e7c58a776", "c8141aa45636931d6bf47554dc28cb42494e49e78ef148a2d102782a58014d45c89a86fdd267a28846182ad7456b4085b18cd2bbcff563ac527b5cbb1b3654d5", "00987c0d028586fa87b0380dd143428c9a47e77d2757876228b56bab65a250f0", [0xff, 0x6]}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) shutdown(r4, 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3e3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x2e, 0x2, 0x4, 0x1, 0x7, 0x8cf6, 0xfffffff9, {r10, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x7e, 0x80, 0x9, 0x2, 0x400002}}, &(0x7f0000000200)=0xb0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x4000004) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000240)=""/6) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r12, 0x5421, &(0x7f0000000100)=0x9) 1.908708054s ago: executing program 4 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$isdn(0x22, 0x3, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4040040) 1.714622713s ago: executing program 0 (id=1): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000002060103000000000000000003000000cb476e82b4c994fc2dbe64468adcf3f4ccff26a6dc0247d73e19c6bd70b52fd7f88092a7dd4f693d9dd18c853352adbfa658183c2e172e64bfafda636c0a2b85a066404ef60c9d7f319d646406b2b004ac8e7036acac0a"], 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4010) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000020010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0) 1.558277723s ago: executing program 4 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x1}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r5, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f0000000040)=0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000280)={@broadcast, @random="13de3cbeea9d", @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "2e3914", 0x46, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff, [0x9]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0x4}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@canfd={0xd, {{}, 0x20, 0x0, 0x0, 0x0, "dcfffc2f048093f4ec41ca5e475e5425e98e88e0172d871d06f65dc17372002b845a6bcbe675e0b4e8b787e5ee762bfa965c5a80b81e73688a1f3f71b75f2817"}}}}, 0x0) 173.434248ms ago: executing program 2 (id=9): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 6) 173.261357ms ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x60, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x40, 0x33, @mgmt_frame=@reassoc_resp={{{}, {0x9}, @device_b, @device_b, @initial, {0xc, 0xcb}}, 0x0, 0x8, @random=0x3, @val, @val={0x2d, 0x1a, {0x2, 0x2, 0x3, 0x0, {0x3, 0x10, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xc000, 0x81}}}}]}, 0x60}}, 0xc00) 0s ago: executing program 4 (id=10): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x18, 0x1}, 0x20) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb01d, 0x4, 0x3b4, 0xe4, 0x0, 0x1000000, 0x2d4, 0x2d4, 0x2d4, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x16d}}}, {{@uncond, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, 0x7, 0xffffffff}}}, {{@arp={@rand_addr=0x64010100, @remote, 0xff000000, 0x0, 0x0, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0x9, 'ipvlan0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x101, 0xd5}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 71.658455][ T5824] cgroup: Unknown subsys name 'net' [ 71.813605][ T5824] cgroup: Unknown subsys name 'cpuset' [ 71.822525][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.191271][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.690969][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.700661][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.710044][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.717727][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.726956][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.734753][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.744429][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.752489][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.760439][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.768395][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.776883][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.785267][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.793595][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.795083][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.809699][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.818239][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.826513][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.826623][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.834341][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.856097][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.856421][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.880854][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.902430][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.911581][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.919078][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.346955][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 76.522624][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.530651][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.538012][ T5852] bridge_slave_0: entered allmulticast mode [ 76.545862][ T5852] bridge_slave_0: entered promiscuous mode [ 76.582010][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.589186][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.596732][ T5852] bridge_slave_1: entered allmulticast mode [ 76.603937][ T5852] bridge_slave_1: entered promiscuous mode [ 76.743464][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.825440][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.887613][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 76.928358][ T5852] team0: Port device team_slave_0 added [ 76.934382][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 76.954853][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 76.966744][ T5852] team0: Port device team_slave_1 added [ 77.032314][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 77.105334][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.112588][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.138788][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.176715][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.184266][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.210829][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.313600][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.320881][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.328077][ T5854] bridge_slave_0: entered allmulticast mode [ 77.335556][ T5854] bridge_slave_0: entered promiscuous mode [ 77.386925][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.394490][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.401966][ T5854] bridge_slave_1: entered allmulticast mode [ 77.409900][ T5854] bridge_slave_1: entered promiscuous mode [ 77.417519][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.425175][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.432888][ T5853] bridge_slave_0: entered allmulticast mode [ 77.440194][ T5853] bridge_slave_0: entered promiscuous mode [ 77.447303][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.454863][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.462203][ T5856] bridge_slave_0: entered allmulticast mode [ 77.469183][ T5856] bridge_slave_0: entered promiscuous mode [ 77.509991][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.517238][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.525334][ T5853] bridge_slave_1: entered allmulticast mode [ 77.532470][ T5853] bridge_slave_1: entered promiscuous mode [ 77.539635][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.546723][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.554409][ T5856] bridge_slave_1: entered allmulticast mode [ 77.561585][ T5856] bridge_slave_1: entered promiscuous mode [ 77.568390][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.575710][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.582968][ T5855] bridge_slave_0: entered allmulticast mode [ 77.590903][ T5855] bridge_slave_0: entered promiscuous mode [ 77.602493][ T5852] hsr_slave_0: entered promiscuous mode [ 77.608863][ T5852] hsr_slave_1: entered promiscuous mode [ 77.647579][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.654874][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.662590][ T5855] bridge_slave_1: entered allmulticast mode [ 77.670424][ T5855] bridge_slave_1: entered promiscuous mode [ 77.680310][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.725985][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.737825][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.750703][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.796987][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.808160][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.821114][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.869793][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.891481][ T5854] team0: Port device team_slave_0 added [ 77.910298][ T52] Bluetooth: hci3: command tx timeout [ 77.916420][ T5848] Bluetooth: hci2: command tx timeout [ 77.943762][ T5854] team0: Port device team_slave_1 added [ 77.951479][ T5853] team0: Port device team_slave_0 added [ 77.959020][ T5856] team0: Port device team_slave_0 added [ 77.990068][ T5848] Bluetooth: hci1: command tx timeout [ 77.998864][ T5853] team0: Port device team_slave_1 added [ 78.004578][ T52] Bluetooth: hci0: command tx timeout [ 78.008661][ T5856] team0: Port device team_slave_1 added [ 78.011272][ T5848] Bluetooth: hci4: command tx timeout [ 78.020006][ T5855] team0: Port device team_slave_0 added [ 78.083185][ T5855] team0: Port device team_slave_1 added [ 78.093854][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.101353][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.127730][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.150710][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.157702][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.184487][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.213059][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.220410][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.248063][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.260957][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.268417][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.295373][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.307229][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.314387][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.341858][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.377393][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.384685][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.410767][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.436612][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.443712][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.469962][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.505935][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.513390][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.539892][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.666391][ T5856] hsr_slave_0: entered promiscuous mode [ 78.674459][ T5856] hsr_slave_1: entered promiscuous mode [ 78.681253][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 78.687102][ T5856] Cannot create hsr debugfs directory [ 78.697984][ T5854] hsr_slave_0: entered promiscuous mode [ 78.704949][ T5854] hsr_slave_1: entered promiscuous mode [ 78.711374][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 78.717115][ T5854] Cannot create hsr debugfs directory [ 78.727777][ T5853] hsr_slave_0: entered promiscuous mode [ 78.734754][ T5853] hsr_slave_1: entered promiscuous mode [ 78.741200][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 78.746957][ T5853] Cannot create hsr debugfs directory [ 78.828130][ T5855] hsr_slave_0: entered promiscuous mode [ 78.835590][ T5855] hsr_slave_1: entered promiscuous mode [ 78.842136][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 78.848015][ T5855] Cannot create hsr debugfs directory [ 79.018617][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.065766][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.097945][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.135961][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.362989][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.377937][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.412958][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.434160][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.492192][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.504310][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.517911][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.535971][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.645860][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.660574][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.677697][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.692561][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.718937][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.817130][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.836685][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.853019][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.861268][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.873055][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.907041][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.914367][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.950998][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.958116][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.990239][ T5848] Bluetooth: hci3: command tx timeout [ 79.995738][ T52] Bluetooth: hci2: command tx timeout [ 80.017874][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.058274][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.070691][ T5848] Bluetooth: hci4: command tx timeout [ 80.070701][ T5837] Bluetooth: hci1: command tx timeout [ 80.076288][ T52] Bluetooth: hci0: command tx timeout [ 80.132532][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.141004][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.177665][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.185244][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.204900][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.212062][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.223136][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.230275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.261616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.268973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.304456][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.376086][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.400508][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.423030][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.432781][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.439974][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.457694][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.464944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.542467][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.558268][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.582615][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.589815][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.620025][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.627134][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.654104][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.678858][ T5852] veth0_vlan: entered promiscuous mode [ 80.733464][ T5852] veth1_vlan: entered promiscuous mode [ 80.788458][ T5853] veth0_vlan: entered promiscuous mode [ 80.840608][ T5856] veth0_vlan: entered promiscuous mode [ 80.851098][ T5853] veth1_vlan: entered promiscuous mode [ 80.862356][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.871907][ T5852] veth0_macvtap: entered promiscuous mode [ 80.895332][ T5852] veth1_macvtap: entered promiscuous mode [ 80.911848][ T5856] veth1_vlan: entered promiscuous mode [ 80.951040][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.990486][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.022934][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.033527][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.046842][ T5853] veth0_macvtap: entered promiscuous mode [ 81.056723][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.066270][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.076489][ T5854] veth0_vlan: entered promiscuous mode [ 81.087697][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.104849][ T5853] veth1_macvtap: entered promiscuous mode [ 81.113350][ T5856] veth0_macvtap: entered promiscuous mode [ 81.133136][ T5856] veth1_macvtap: entered promiscuous mode [ 81.157345][ T5854] veth1_vlan: entered promiscuous mode [ 81.196478][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.226033][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.262028][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.272997][ T1002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282533][ T1002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.297779][ T1002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.308676][ T1002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322634][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.334606][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.348971][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.397516][ T1002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.423352][ T1002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.436459][ T1002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.452810][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.458266][ T1002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.463431][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.508955][ T5855] veth0_vlan: entered promiscuous mode [ 81.550968][ T5854] veth0_macvtap: entered promiscuous mode [ 81.570486][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.574379][ T5855] veth1_vlan: entered promiscuous mode [ 81.603457][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.614446][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.646750][ T5854] veth1_macvtap: entered promiscuous mode [ 81.750934][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.758812][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.781806][ T5855] veth0_macvtap: entered promiscuous mode [ 81.789824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.812731][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.820542][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.845461][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.923451][ T5855] veth1_macvtap: entered promiscuous mode [ 81.951622][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.962510][ T3014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.994674][ T3014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.997660][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.060940][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.078564][ T52] Bluetooth: hci2: command tx timeout [ 82.078573][ T5837] Bluetooth: hci3: command tx timeout [ 82.080129][ T3014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.136520][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.149936][ T52] Bluetooth: hci1: command tx timeout [ 82.149960][ T5837] Bluetooth: hci0: command tx timeout [ 82.155358][ T5848] Bluetooth: hci4: command tx timeout [ 82.185364][ T3014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.349454][ T3014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.400924][ T1002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.404290][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7'. [ 82.413214][ T1002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.471111][ T1002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.481649][ T5937] Zero length message leads to an empty skb [ 82.548562][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.561969][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.825889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.919922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.929994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 82.938329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 82.947826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.956741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.046999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.099777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.111365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.120051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.140603][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.227711][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.267099][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.728186][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.747310][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.008519][ T5967] FAULT_INJECTION: forcing a failure. [ 84.008519][ T5967] name failslab, interval 1, probability 0, space 0, times 1 [ 84.049485][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 84.049508][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.049529][ T5967] Call Trace: [ 84.049536][ T5967] [ 84.049544][ T5967] dump_stack_lvl+0x189/0x250 [ 84.049574][ T5967] ? __pfx____ratelimit+0x10/0x10 [ 84.049595][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.049610][ T5967] ? __pfx__printk+0x10/0x10 [ 84.049632][ T5967] ? __pfx___might_resched+0x10/0x10 [ 84.049648][ T5967] ? fs_reclaim_acquire+0x7d/0x100 [ 84.049670][ T5967] should_fail_ex+0x414/0x560 [ 84.049694][ T5967] should_failslab+0xa8/0x100 [ 84.049715][ T5967] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 84.049737][ T5967] ? __d_alloc+0x37/0x6f0 [ 84.049758][ T5967] __d_alloc+0x37/0x6f0 [ 84.049779][ T5967] d_alloc_pseudo+0x21/0xc0 [ 84.049796][ T5967] alloc_file_pseudo+0xcc/0x210 [ 84.049815][ T5967] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 84.049831][ T5967] ? _raw_spin_unlock+0x28/0x50 [ 84.049857][ T5967] ? alloc_fd+0x64c/0x6c0 [ 84.049877][ T5967] sock_alloc_file+0xb8/0x2e0 [ 84.049895][ T5967] ? __sys_socket+0x12e/0x320 [ 84.049915][ T5967] __sys_socket+0x13e/0x320 [ 84.049936][ T5967] __ia32_compat_sys_socketcall+0x6df/0x9d0 [ 84.049955][ T5967] ? __fget_files+0x3a0/0x420 [ 84.049973][ T5967] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 84.049992][ T5967] ? fput+0xa0/0xd0 [ 84.050008][ T5967] ? ksys_write+0x22a/0x250 [ 84.050027][ T5967] ? exc_page_fault+0x82/0x100 [ 84.050049][ T5967] ? __pfx_ksys_write+0x10/0x10 [ 84.050073][ T5967] ? __do_fast_syscall_32+0xbe/0x570 [ 84.050098][ T5967] __do_fast_syscall_32+0x1f7/0x570 [ 84.050121][ T5967] ? rcu_is_watching+0x15/0xb0 [ 84.050139][ T5967] ? do_fast_syscall_32+0x34/0x80 [ 84.050166][ T5967] do_fast_syscall_32+0x34/0x80 [ 84.050187][ T5967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.050206][ T5967] RIP: 0023:0xf7f33539 [ 84.050228][ T5967] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 84.050242][ T5967] RSP: 002b:00000000f54254f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 84.050260][ T5967] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f5425500 [ 84.050271][ T5967] RDX: 00000000f73c6ff4 RSI: 0000000000000000 RDI: 00000000f73c6ff4 [ 84.050281][ T5967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.050290][ T5967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.050300][ T5967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.050326][ T5967] [ 84.056877][ T5967] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff888076543480 [ 84.056877][ T5967] fs sockfs mode 140777 opflags 0x8 flags 0x0 state 0x300 count 0 [ 84.209514][ T5848] Bluetooth: hci2: command tx timeout [ 84.239498][ T5837] Bluetooth: hci4: command tx timeout [ 84.240438][ T5156] Bluetooth: hci1: command tx timeout [ 84.246661][ T5840] Bluetooth: hci0: command tx timeout [ 84.299532][ T52] Bluetooth: hci3: command tx timeout [ 84.372230][ T5967] ------------[ cut here ]------------ [ 84.377780][ T5967] kernel BUG at fs/inode.c:1971! [ 84.402649][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.474381][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.538975][ T5967] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 84.545279][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 84.554317][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.564395][ T5967] RIP: 0010:iput+0xfc9/0x1030 [ 84.569100][ T5967] Code: 8b 7c 24 18 48 c7 c6 60 e1 79 8b e8 31 48 e8 fe 90 0f 0b e8 e9 57 81 ff 48 8b 7c 24 18 48 c7 c6 00 e1 79 8b e8 18 48 e8 fe 90 <0f> 0b 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fb ff ff 4c 89 ef [ 84.588722][ T5967] RSP: 0018:ffffc900047bfc90 EFLAGS: 00010282 [ 84.594792][ T5967] RAX: 000000000000009f RBX: dffffc0000000000 RCX: fcb0e407300b5b00 [ 84.602824][ T5967] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 84.610801][ T5967] RBP: 1ffffffff1ed7912 R08: ffffffff8f811577 R09: 1ffffffff1f022ae [ 84.618858][ T5967] R10: dffffc0000000000 R11: fffffbfff1f022af R12: 1ffff1100eca86d0 [ 84.626828][ T5967] R13: ffff888076543680 R14: 0000000000000200 R15: 1ffffffff1f028b2 [ 84.634793][ T5967] FS: 0000000000000000(0000) GS:ffff888126094000(0063) knlGS:00000000f5426b40 [ 84.643720][ T5967] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 84.650319][ T5967] CR2: 00000000f7fd55c0 CR3: 0000000027b02000 CR4: 00000000003526f0 [ 84.658288][ T5967] Call Trace: [ 84.661563][ T5967] [ 84.664480][ T5967] ? do_raw_spin_unlock+0x122/0x240 [ 84.669675][ T5967] __sys_socket+0x2bf/0x320 [ 84.674176][ T5967] __ia32_compat_sys_socketcall+0x6df/0x9d0 [ 84.680057][ T5967] ? __fget_files+0x3a0/0x420 [ 84.684717][ T5967] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 84.691119][ T5967] ? fput+0xa0/0xd0 [ 84.694921][ T5967] ? ksys_write+0x22a/0x250 [ 84.699417][ T5967] ? exc_page_fault+0x82/0x100 [ 84.704179][ T5967] ? __pfx_ksys_write+0x10/0x10 [ 84.709039][ T5967] ? __do_fast_syscall_32+0xbe/0x570 [ 84.714338][ T5967] __do_fast_syscall_32+0x1f7/0x570 [ 84.719722][ T5967] ? rcu_is_watching+0x15/0xb0 [ 84.724494][ T5967] ? do_fast_syscall_32+0x34/0x80 [ 84.729633][ T5967] do_fast_syscall_32+0x34/0x80 [ 84.734497][ T5967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.740834][ T5967] RIP: 0023:0xf7f33539 [ 84.744910][ T5967] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 84.764510][ T5967] RSP: 002b:00000000f54254f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 84.772924][ T5967] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f5425500 [ 84.780892][ T5967] RDX: 00000000f73c6ff4 RSI: 0000000000000000 RDI: 00000000f73c6ff4 [ 84.788859][ T5967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.796823][ T5967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.804790][ T5967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.812767][ T5967] [ 84.815820][ T5967] Modules linked in: [ 84.821285][ T5967] ---[ end trace 0000000000000000 ]--- [ 84.914678][ T5967] RIP: 0010:iput+0xfc9/0x1030 [ 84.922378][ T5967] Code: 8b 7c 24 18 48 c7 c6 60 e1 79 8b e8 31 48 e8 fe 90 0f 0b e8 e9 57 81 ff 48 8b 7c 24 18 48 c7 c6 00 e1 79 8b e8 18 48 e8 fe 90 <0f> 0b 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fb ff ff 4c 89 ef [ 84.947697][ T5967] RSP: 0018:ffffc900047bfc90 EFLAGS: 00010282 [ 84.971644][ T5967] RAX: 000000000000009f RBX: dffffc0000000000 RCX: fcb0e407300b5b00 [ 84.981779][ T5967] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 84.990022][ T5967] RBP: 1ffffffff1ed7912 R08: ffffffff8f811577 R09: 1ffffffff1f022ae [ 84.998160][ T5967] R10: dffffc0000000000 R11: fffffbfff1f022af R12: 1ffff1100eca86d0 [ 85.006685][ T5967] R13: ffff888076543680 R14: 0000000000000200 R15: 1ffffffff1f028b2 [ 85.015081][ T5967] FS: 0000000000000000(0000) GS:ffff888126094000(0063) knlGS:00000000f5426b40 [ 85.024313][ T5967] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 85.031348][ T5967] CR2: 00000000f74799b4 CR3: 0000000027b02000 CR4: 00000000003526f0 [ 85.040771][ T5967] Kernel panic - not syncing: Fatal exception [ 85.047367][ T5967] Kernel Offset: disabled [ 85.051709][ T5967] Rebooting in 86400 seconds..