last executing test programs: 15.595186478s ago: executing program 2 (id=27): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.511633657s ago: executing program 4 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0xffffffffffffffff) write$nci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x404c094) 15.207362094s ago: executing program 2 (id=31): r0 = dup(0xffffffffffffffff) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r0, 0x0, 0x0, 0x0}, 0x30) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) shutdown(r7, 0x1) 14.129510626s ago: executing program 4 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x800) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 12.987348142s ago: executing program 2 (id=33): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r5 = fsmount(r3, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11.166790309s ago: executing program 1 (id=37): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, &(0x7f0000000040)=""/115, 0x73, 0xeb04) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$alg(0xffffffffffffffff, 0x0, 0x14000012) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0)='adfs\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x2, 0xffffffffffffffff, 0x0}) 10.52222836s ago: executing program 3 (id=39): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0xb, 0x0, 0x0, 0x0, 0x0, 0x5}) 10.440856459s ago: executing program 0 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x8000) 10.179612128s ago: executing program 3 (id=41): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10.069538812s ago: executing program 0 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {0xa}, {}, {}]}, @fwd, @volatile={0x10}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func={0xb, 0x0, 0x0, 0xc, 0x3}]}}, 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) 9.791940293s ago: executing program 3 (id=43): r0 = dup(0xffffffffffffffff) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r0, 0x0, 0x0, 0x0}, 0x30) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) shutdown(r7, 0x1) 8.291178335s ago: executing program 3 (id=44): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 8.014827753s ago: executing program 3 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.516012148s ago: executing program 4 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x2}, 0x40000103) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000880)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x15dc, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) unshare(0xa000400) 6.427184456s ago: executing program 4 (id=47): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x80000000, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000800)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x10, 0x40084}, 0xc4) sendto$inet(r0, 0x0, 0x0, 0xc806, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}}], 0x1, 0x10008000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) 6.356341492s ago: executing program 2 (id=48): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401406"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.812337898s ago: executing program 3 (id=49): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) keyctl$link(0x8, r4, r3) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x1) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x800, 0x3af, 0x35c, 0xc, 0x8, 0x101, 0x1ff, 0xfff8, 0x401, 0x3ff, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x80015b12, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 5.744078542s ago: executing program 0 (id=50): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.426610998s ago: executing program 0 (id=51): futex(0x0, 0x4, 0x0, 0x0, 0x0, 0xb201fffe) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 3.927988903s ago: executing program 0 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0)='adfs\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x2, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 3.655262561s ago: executing program 4 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000000080)=""/177, 0xb1}], 0x2}, 0x10002) 3.414629395s ago: executing program 1 (id=54): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.208979482s ago: executing program 1 (id=55): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 2.973744407s ago: executing program 2 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r7, 0x0) poll(&(0x7f00000000c0)=[{r7, 0x400}], 0x1, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) 2.831674425s ago: executing program 1 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x2}, 0x40000103) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000880)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x15dc, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) unshare(0xa000400) 542.42706ms ago: executing program 2 (id=58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r5 = fsmount(r3, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 447.08682ms ago: executing program 1 (id=59): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 35.439994ms ago: executing program 0 (id=60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 34.938519ms ago: executing program 1 (id=61): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=62): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x10000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0x4a, 0x0, @buffer={0x0, 0x7b, &(0x7f0000000040)=""/123}, &(0x7f00000000c0)="5e8c857c28fdaae6633e77e352ed6d09d01661348c6f954610e97de0984f4413a1d50ec3d6da3b0f1a5efa5d9b3e5f57dea91111e218e02fe636dfd690aceb0307992c8dc2207aa9cd02", &(0x7f0000000480)=""/237, 0xc5d0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 82.238729][ T5783] cgroup: Unknown subsys name 'net' [ 82.508325][ T5783] cgroup: Unknown subsys name 'cpuset' [ 82.563233][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.282005][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.086185][ T9] cfg80211: failed to load regulatory.db [ 88.293657][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.296491][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.299654][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.306030][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.307415][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.308335][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.310422][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.311261][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.314827][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.317093][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.320118][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.325783][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.327801][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.333767][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.335305][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.336188][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.345201][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.347834][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.350942][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.358156][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.388946][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.389250][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.422523][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.484200][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.485749][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.320505][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 89.594139][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 89.611421][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 89.623759][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 89.675862][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 90.235126][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.235857][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.236241][ T5796] bridge_slave_0: entered allmulticast mode [ 90.238516][ T5796] bridge_slave_0: entered promiscuous mode [ 90.299989][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.300118][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.300284][ T5796] bridge_slave_1: entered allmulticast mode [ 90.301774][ T5796] bridge_slave_1: entered promiscuous mode [ 90.365123][ T5801] Bluetooth: hci1: command tx timeout [ 90.365128][ T5114] Bluetooth: hci4: command tx timeout [ 90.444792][ T5801] Bluetooth: hci3: command tx timeout [ 90.522413][ T5114] Bluetooth: hci2: command tx timeout [ 90.522605][ T5801] Bluetooth: hci0: command tx timeout [ 90.983874][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.984069][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.984238][ T5798] bridge_slave_0: entered allmulticast mode [ 90.986181][ T5798] bridge_slave_0: entered promiscuous mode [ 91.089454][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.089696][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.089830][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.089994][ T5795] bridge_slave_0: entered allmulticast mode [ 91.124376][ T5795] bridge_slave_0: entered promiscuous mode [ 91.127273][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.127415][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.127526][ T5799] bridge_slave_0: entered allmulticast mode [ 91.128961][ T5799] bridge_slave_0: entered promiscuous mode [ 91.131380][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.131509][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.131689][ T5798] bridge_slave_1: entered allmulticast mode [ 91.135389][ T5798] bridge_slave_1: entered promiscuous mode [ 91.246259][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.246639][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.246770][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.246891][ T5795] bridge_slave_1: entered allmulticast mode [ 91.248535][ T5795] bridge_slave_1: entered promiscuous mode [ 91.334633][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.334731][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.334845][ T5799] bridge_slave_1: entered allmulticast mode [ 91.336308][ T5799] bridge_slave_1: entered promiscuous mode [ 91.413733][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.413846][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.413987][ T5797] bridge_slave_0: entered allmulticast mode [ 91.415567][ T5797] bridge_slave_0: entered promiscuous mode [ 91.736573][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.736673][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.736814][ T5797] bridge_slave_1: entered allmulticast mode [ 91.738286][ T5797] bridge_slave_1: entered promiscuous mode [ 91.876363][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.995532][ T5796] team0: Port device team_slave_0 added [ 91.999841][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.003202][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.006643][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.075168][ T5796] team0: Port device team_slave_1 added [ 92.077326][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.080086][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.176572][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.415912][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.442453][ T5801] Bluetooth: hci1: command tx timeout [ 92.443722][ T5114] Bluetooth: hci4: command tx timeout [ 92.522423][ T5801] Bluetooth: hci3: command tx timeout [ 92.602656][ T5801] Bluetooth: hci0: command tx timeout [ 92.602690][ T5801] Bluetooth: hci2: command tx timeout [ 92.874949][ T5798] team0: Port device team_slave_0 added [ 92.964275][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.964287][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.964300][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.968196][ T5795] team0: Port device team_slave_0 added [ 92.970236][ T5799] team0: Port device team_slave_0 added [ 92.974696][ T5798] team0: Port device team_slave_1 added [ 93.084206][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.084225][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.084248][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.086240][ T5795] team0: Port device team_slave_1 added [ 93.088192][ T5799] team0: Port device team_slave_1 added [ 93.225669][ T5797] team0: Port device team_slave_0 added [ 93.425666][ T5797] team0: Port device team_slave_1 added [ 93.564290][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.564308][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.564339][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.734864][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.734877][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.734891][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.736106][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.736120][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.736143][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.737359][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.737381][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.737405][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.083775][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.083789][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.083802][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.084737][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.084749][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.084762][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.114432][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.114451][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.114475][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.299750][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.299769][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.299792][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.310912][ T5796] hsr_slave_0: entered promiscuous mode [ 94.313844][ T5796] hsr_slave_1: entered promiscuous mode [ 94.523657][ T5114] Bluetooth: hci1: command tx timeout [ 94.523694][ T5114] Bluetooth: hci4: command tx timeout [ 94.603694][ T5114] Bluetooth: hci3: command tx timeout [ 94.683930][ T5114] Bluetooth: hci2: command tx timeout [ 94.683967][ T5114] Bluetooth: hci0: command tx timeout [ 94.838429][ T5798] hsr_slave_0: entered promiscuous mode [ 94.839270][ T5798] hsr_slave_1: entered promiscuous mode [ 94.840035][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 94.840121][ T5798] Cannot create hsr debugfs directory [ 94.885342][ T5795] hsr_slave_0: entered promiscuous mode [ 94.886798][ T5795] hsr_slave_1: entered promiscuous mode [ 94.887813][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 94.887838][ T5795] Cannot create hsr debugfs directory [ 94.959304][ T5799] hsr_slave_0: entered promiscuous mode [ 94.960488][ T5799] hsr_slave_1: entered promiscuous mode [ 94.961132][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 94.961163][ T5799] Cannot create hsr debugfs directory [ 95.100225][ T5797] hsr_slave_0: entered promiscuous mode [ 95.101065][ T5797] hsr_slave_1: entered promiscuous mode [ 95.101629][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 95.101651][ T5797] Cannot create hsr debugfs directory [ 96.465215][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.504162][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.535935][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.589175][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.602618][ T5801] Bluetooth: hci4: command tx timeout [ 96.602626][ T5114] Bluetooth: hci1: command tx timeout [ 96.682635][ T5114] Bluetooth: hci3: command tx timeout [ 96.713697][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.740957][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.762818][ T5114] Bluetooth: hci0: command tx timeout [ 96.762850][ T5801] Bluetooth: hci2: command tx timeout [ 96.788367][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.848881][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.981562][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.028817][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.051335][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.108004][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.251921][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.294243][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.336716][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.387035][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.502849][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.557538][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.591087][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.632944][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.675816][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.730411][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.773862][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.774096][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.824488][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.824686][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.850915][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.941210][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.965175][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.997409][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.997558][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.052538][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.052707][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.094996][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.127910][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.130854][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.130986][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.196451][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.196594][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.281746][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.377480][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.377645][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.389820][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.427138][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.427285][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.554896][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.594743][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.594963][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.636600][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.645831][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.646016][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.894412][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.980953][ T5796] veth0_vlan: entered promiscuous mode [ 99.035865][ T5796] veth1_vlan: entered promiscuous mode [ 99.177149][ T5798] veth0_vlan: entered promiscuous mode [ 99.266414][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.268279][ T5798] veth1_vlan: entered promiscuous mode [ 99.279003][ T5796] veth0_macvtap: entered promiscuous mode [ 99.308977][ T5796] veth1_macvtap: entered promiscuous mode [ 99.389363][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.420127][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.443786][ T5798] veth0_macvtap: entered promiscuous mode [ 99.458523][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.476882][ T5798] veth1_macvtap: entered promiscuous mode [ 99.515803][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.517782][ T2938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.522831][ T2938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.529487][ T2938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.537478][ T2938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.639433][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.729091][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.852215][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.856817][ T5797] veth0_vlan: entered promiscuous mode [ 99.858898][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.914860][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.943370][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.968936][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.968966][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.975399][ T5797] veth1_vlan: entered promiscuous mode [ 100.047520][ T5799] veth0_vlan: entered promiscuous mode [ 100.172042][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.172067][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.234251][ T5799] veth1_vlan: entered promiscuous mode [ 100.298072][ T5795] veth0_vlan: entered promiscuous mode [ 100.391723][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.391744][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.427207][ T5797] veth0_macvtap: entered promiscuous mode [ 100.428934][ T5795] veth1_vlan: entered promiscuous mode [ 100.462873][ T5797] veth1_macvtap: entered promiscuous mode [ 100.566496][ T5799] veth0_macvtap: entered promiscuous mode [ 100.588127][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.588148][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.588598][ T5799] veth1_macvtap: entered promiscuous mode [ 100.697012][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.776555][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.780566][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.801534][ T5795] veth0_macvtap: entered promiscuous mode [ 100.855215][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.859151][ T5795] veth1_macvtap: entered promiscuous mode [ 100.861487][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.898613][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.904076][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.924291][ T5918] lo speed is unknown, defaulting to 1000 [ 100.924500][ T5918] lo speed is unknown, defaulting to 1000 [ 100.927962][ T5918] lo speed is unknown, defaulting to 1000 [ 100.935275][ T5918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.948914][ T5918] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 100.989648][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.066969][ T5918] lo speed is unknown, defaulting to 1000 [ 101.068893][ T5918] lo speed is unknown, defaulting to 1000 [ 101.070674][ T5918] lo speed is unknown, defaulting to 1000 [ 101.073024][ T5918] lo speed is unknown, defaulting to 1000 [ 101.076037][ T5918] lo speed is unknown, defaulting to 1000 [ 101.094681][ T3514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.121079][ T3514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.146949][ T3514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.152026][ T3514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.239311][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.371421][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.606596][ T3514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.782457][ T3514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.828963][ T3514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.829696][ T3514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.079629][ T2046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.079650][ T2046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.993503][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.993529][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.202985][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.203007][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.353737][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.353759][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.529274][ T2142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.529296][ T2142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.627432][ T5941] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11'. [ 104.667012][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.667035][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.239726][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 110.346124][ T5987] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21'. [ 110.634011][ T5991] overlayfs: overlapping lowerdir path [ 112.321930][ T5993] lo speed is unknown, defaulting to 1000 [ 112.895101][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.535770][ T37] audit: type=1326 audit(1765146639.171:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.695467][ T37] audit: type=1326 audit(1765146639.231:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.695764][ T37] audit: type=1326 audit(1765146639.271:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.695993][ T37] audit: type=1326 audit(1765146639.281:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.696366][ T37] audit: type=1326 audit(1765146639.281:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.696617][ T37] audit: type=1326 audit(1765146639.281:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.696865][ T37] audit: type=1326 audit(1765146639.281:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.697127][ T37] audit: type=1326 audit(1765146639.281:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.697390][ T37] audit: type=1326 audit(1765146639.281:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 115.697646][ T37] audit: type=1326 audit(1765146639.281:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6034 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcdbbf749 code=0x7ffc0000 [ 116.723283][ T6046] netlink: 72 bytes leftover after parsing attributes in process `syz.2.33'. [ 116.810605][ T6045] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.022273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.697520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 117.700999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 119.896068][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 120.249131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.832277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.832840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.833901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.835022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.012269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.202276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.544651][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 121.544671][ T37] audit: type=1326 audit(1765146645.211:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.544716][ T37] audit: type=1326 audit(1765146645.211:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589047][ T37] audit: type=1326 audit(1765146645.221:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589097][ T37] audit: type=1326 audit(1765146645.221:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589137][ T37] audit: type=1326 audit(1765146645.221:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589172][ T37] audit: type=1326 audit(1765146645.221:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589200][ T37] audit: type=1326 audit(1765146645.221:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589232][ T37] audit: type=1326 audit(1765146645.221:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589269][ T37] audit: type=1326 audit(1765146645.221:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 121.589305][ T37] audit: type=1326 audit(1765146645.221:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6076 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5c9f749 code=0x7ffc0000 [ 122.373156][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 123.446178][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 123.446225][ T9] usb 3-1: config 0 has no interface number 0 [ 123.446682][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 123.480879][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 123.480911][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.480932][ T9] usb 3-1: Product: syz [ 123.480945][ T9] usb 3-1: Manufacturer: syz [ 123.480959][ T9] usb 3-1: SerialNumber: syz [ 123.548138][ T9] usb 3-1: config 0 descriptor?? [ 123.612798][ T6086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.612943][ T6086] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.728001][ T6086] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.771786][ T6086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.771893][ T6086] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.818319][ T6086] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.880686][ T6086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.880776][ T6086] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.924506][ T6086] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.973917][ T6086] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.974005][ T6086] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.063869][ T6086] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.113704][ T6086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.113766][ T6086] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.176830][ T6086] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.343864][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.488353][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 124.489782][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 124.591429][ T9] usb 3-1: USB disconnect, device number 2 [ 124.828649][ T5979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.990967][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 125.002542][ T5979] usb 4-1: Using ep0 maxpacket: 8 [ 125.138471][ T5979] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 125.138511][ T5979] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.138523][ T5979] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.138536][ T5979] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.138547][ T5979] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.138571][ T5979] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.138583][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.824729][ T5801] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.969861][ T5801] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.042774][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.247185][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.366146][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.882421][ T5801] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.043582][ T5801] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.151703][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.385319][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.519877][ T6135] netlink: 72 bytes leftover after parsing attributes in process `syz.2.58'. [ 129.509011][ T6142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.509084][ T6142] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.582031][ C1] ------------[ cut here ]------------ [ 129.582049][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 129.582097][ C1] WARNING: kernel/workqueue.c:2252 at 0x0, CPU#1: ktimers/1/29 [ 129.582128][ C1] Modules linked in: [ 129.582167][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.582189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.582205][ C1] RIP: 0010:__queue_work+0xd88/0xff0 [ 129.582231][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 39 3a 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 d8 [ 129.582244][ C1] RSP: 0018:ffffc90000a3f7f0 EFLAGS: 00010082 [ 129.582258][ C1] RAX: 1ffff110060ab953 RBX: 0000000000000008 RCX: ffff88801be99e40 [ 129.582272][ C1] RDX: ffff88802a4b7168 RSI: ffffffff89cc8ed0 RDI: ffffffff8edd4360 [ 129.582287][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 129.582299][ C1] R10: dffffc0000000000 R11: ffffffff818aa600 R12: dffffc0000000000 [ 129.582313][ C1] R13: ffff88803055ca98 R14: ffffffff8edd4360 R15: ffff88802a4b7168 [ 129.582329][ C1] FS: 0000000000000000(0000) GS:ffff888126e12000(0000) knlGS:0000000000000000 [ 129.582345][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.582359][ C1] CR2: 000020000010d030 CR3: 0000000027d38000 CR4: 00000000003526f0 [ 129.582377][ C1] Call Trace: [ 129.582394][ C1] [ 129.582418][ C1] call_timer_fn+0x16e/0x590 [ 129.582447][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.582471][ C1] ? call_timer_fn+0xbe/0x590 [ 129.582498][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 129.582537][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 129.582557][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.582581][ C1] __run_timer_base+0x709/0x970 [ 129.582625][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 129.582670][ C1] run_timer_softirq+0xb7/0x180 [ 129.582698][ C1] handle_softirqs+0x226/0x6d0 [ 129.582734][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 129.582770][ C1] run_ktimerd+0xcf/0x190 [ 129.582802][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 129.582825][ C1] ? schedule+0x91/0x360 [ 129.582858][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 129.582881][ C1] smpboot_thread_fn+0x542/0xa60 [ 129.582904][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 129.582938][ C1] kthread+0x711/0x8a0 [ 129.582968][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 129.582991][ C1] ? __pfx_kthread+0x10/0x10 [ 129.583014][ C1] ? rt_spin_unlock+0x150/0x200 [ 129.583038][ C1] ? rt_spin_unlock+0x161/0x200 [ 129.583055][ C1] ? __pfx_kthread+0x10/0x10 [ 129.583082][ C1] ret_from_fork+0x599/0xb30 [ 129.583107][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 129.583140][ C1] ? __switch_to_asm+0x39/0x70 [ 129.583166][ C1] ? __switch_to_asm+0x33/0x70 [ 129.583219][ C1] ? __pfx_kthread+0x10/0x10 [ 129.583247][ C1] ret_from_fork_asm+0x1a/0x30 [ 129.583292][ C1] [ 129.583311][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.583326][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.583348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.583359][ C1] Call Trace: [ 129.583367][ C1] [ 129.583397][ C1] dump_stack_lvl+0x99/0x250 [ 129.583422][ C1] ? __asan_memcpy+0x40/0x70 [ 129.583447][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.583471][ C1] ? __pfx__printk+0x10/0x10 [ 129.583506][ C1] vpanic+0x237/0x6d0 [ 129.583531][ C1] ? __pfx_vpanic+0x10/0x10 [ 129.583552][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 129.583577][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 129.583614][ C1] panic+0xb9/0xc0 [ 129.583638][ C1] ? __pfx_panic+0x10/0x10 [ 129.583673][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 129.583707][ C1] __warn+0x317/0x4b0 [ 129.583740][ C1] __report_bug+0x288/0x500 [ 129.583775][ C1] ? __pfx___report_bug+0x10/0x10 [ 129.583804][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 129.583842][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 129.583872][ C1] report_bug_entry+0x16a/0x220 [ 129.583895][ C1] ? __queue_work+0xd88/0xff0 [ 129.583917][ C1] ? __queue_work+0xd8d/0xff0 [ 129.583938][ C1] handle_bug+0xca/0x200 [ 129.583967][ C1] exc_invalid_op+0x1a/0x50 [ 129.584000][ C1] asm_exc_invalid_op+0x1a/0x20 [ 129.584019][ C1] RIP: 0010:__queue_work+0xd88/0xff0 [ 129.584043][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 39 3a 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 d8 [ 129.584059][ C1] RSP: 0018:ffffc90000a3f7f0 EFLAGS: 00010082 [ 129.584077][ C1] RAX: 1ffff110060ab953 RBX: 0000000000000008 RCX: ffff88801be99e40 [ 129.584092][ C1] RDX: ffff88802a4b7168 RSI: ffffffff89cc8ed0 RDI: ffffffff8edd4360 [ 129.584107][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 129.584119][ C1] R10: dffffc0000000000 R11: ffffffff818aa600 R12: dffffc0000000000 [ 129.584134][ C1] R13: ffff88803055ca98 R14: ffffffff8edd4360 R15: ffff88802a4b7168 [ 129.584155][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.584183][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 129.584227][ C1] call_timer_fn+0x16e/0x590 [ 129.584255][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.584279][ C1] ? call_timer_fn+0xbe/0x590 [ 129.584306][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 129.584345][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 129.584367][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.584394][ C1] __run_timer_base+0x709/0x970 [ 129.584438][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 129.584484][ C1] run_timer_softirq+0xb7/0x180 [ 129.584513][ C1] handle_softirqs+0x226/0x6d0 [ 129.584548][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 129.584596][ C1] run_ktimerd+0xcf/0x190 [ 129.584621][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 129.584653][ C1] ? schedule+0x91/0x360 [ 129.584685][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 129.584709][ C1] smpboot_thread_fn+0x542/0xa60 [ 129.584735][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 129.584770][ C1] kthread+0x711/0x8a0 [ 129.584808][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 129.584833][ C1] ? __pfx_kthread+0x10/0x10 [ 129.584857][ C1] ? rt_spin_unlock+0x150/0x200 [ 129.584882][ C1] ? rt_spin_unlock+0x161/0x200 [ 129.584899][ C1] ? __pfx_kthread+0x10/0x10 [ 129.584928][ C1] ret_from_fork+0x599/0xb30 [ 129.584953][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 129.584987][ C1] ? __switch_to_asm+0x39/0x70 [ 129.585020][ C1] ? __switch_to_asm+0x33/0x70 [ 129.585051][ C1] ? __pfx_kthread+0x10/0x10 [ 129.585079][ C1] ret_from_fork_asm+0x1a/0x30 [ 129.585129][ C1] [ 129.586005][ C1] Kernel Offset: disabled