last executing test programs: 5.263999636s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "180922bf97fbc438370ee459ed3961ce"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040040) 5.100895591s ago: executing program 3 (id=6): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @empty, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback}}}], 0x20}}], 0x1, 0x40) 4.989711749s ago: executing program 3 (id=7): epoll_create1(0x0) socket$igmp(0x2, 0x3, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x42202) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4.421021427s ago: executing program 0 (id=1): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x54, &(0x7f00000004c0)=""/84, 0x41100, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x4, 0xffff8000}, 0x10, 0x1f002, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x3, 0xd, 0x1}]}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001800010a00000000000000060a000000"], 0x14}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0xc003, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x82, 0xffffffff, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) socket$nl_generic(0x10, 0x3, 0x10) 4.099009262s ago: executing program 1 (id=2): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffd57, &(0x7f0000000200)=[{0x0}, {&(0x7f00000002c0)="850c23b91980", 0x6}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e}}], 0x1c, 0x2400e044}, 0x6) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x4, 0x4}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$hidraw(&(0x7f00000000c0), 0x5, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000fc000000000000000000000000000001000000054e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) 3.866094522s ago: executing program 3 (id=8): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) socket(0x23, 0x1, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="113c09f5", @ANYRES16=r4, @ANYBLOB="200028bd7000fedbdf250f00000008000280040004"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000140)=0x1, 0x4, 0x0, 0x0, 0x0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="000000000000000000a7b9534e0e54fc0ac70a36c3ff02000000000000000000006f5d7b2ac409ed5c4520d7b4cca589f4bdb7c5daea24a9c42e33f1f798ecb7c1d5384a1ed6da977ff12024fb6a042af35c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x58, &(0x7f0000000040)}, 0x10) 1.62203224s ago: executing program 3 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) clock_gettime(0x0, &(0x7f0000000300)) r7 = io_uring_setup(0x2e30, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c63616368653d6d6d61702c6b5009d990b1"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r13 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r13, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) 1.456470771s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x3fde, 0xc00, 0x10, 0x147}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c044}], 0x1, 0x8800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003400)=@delchain={0x38, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x5, 0xa}, {0x4, 0xf}}, [@f_tcindex={{0xc}, {0x8, 0x2, [@TCA_TCINDEX_ACT={0x4}]}}]}, 0x38}}, 0x4080000) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) getpid() sysfs$3(0x3) 1.418166864s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x25, 0x82, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6", &(0x7f0000000500)=""/130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x4c) r1 = openat$vcs(0xffffff9c, &(0x7f00000003c0), 0x60002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000001780)=@deltfilter={0x1a0, 0x2d, 0xe20, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0xfff2, 0xfff3}, {0x6, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x21}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_cgroup={{0xb}, {0x158, 0x2, [@TCA_CGROUP_EMATCHES={0x124, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1ff, 0x3, 0x1}, {0x400, 0x6, 0x35, 0xb3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x101, 0x2, 0x6}, {0x5}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x978}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="ba167a", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="a29f1e2e6d2f4b02", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8be5", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CONTAINER={0x6c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x7f}, "1fb2b9fc20b0f4671ffcda6c4ed105f033977e66dff5a3ec76271710a29a47376dcb29c67c8fb66eba4f8d084f752f7dabf603ca942ee889eecd1dc6af2fc8dd8bb83cbb5b7c6b971acea7c40269531c06da6a401c06b0a284dc73152c9b"}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x4}, {0x3, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x10}, {0xfff, 0x8, 0x2, "fd03e990c0859ca9"}}}]}]}, @TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xd5, 0x0, 0xc0fa}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x81, 0x8, 0xc}, {0x3, 0x2, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xcb}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xfba72b0548d740c9}, 0x4000040) r2 = syz_pidfd_open(0x0, 0x0) pipe(0x0) read$alg(0xffffffffffffffff, &(0x7f0000000200)=""/96, 0x60) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="280000004e002e5620b3"], 0x143000) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000001c0), 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r4, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 822.063078ms ago: executing program 0 (id=10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xe72, 0x4b, 0x809}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) write$uinput_user_dev(r2, 0x0, 0x0) 702.400277ms ago: executing program 4 (id=11): socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 383.732144ms ago: executing program 1 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) 173.532392ms ago: executing program 0 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d4d549b, 0x0, [0xdd, 0x8, 0x400000000000000, 0x8, 0x10001, 0x8000000000000a, 0x1000000006, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.536997ms ago: executing program 3 (id=14): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000631000000000000062000200000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe64}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 0s ago: executing program 4 (id=15): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 86.496110][ T5824] cgroup: Unknown subsys name 'net' [ 86.739505][ T5824] cgroup: Unknown subsys name 'cpuset' [ 86.794298][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.795707][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.762492][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.773341][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.782299][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.787385][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.794255][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.795055][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.796556][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.797396][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.799572][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.802456][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.804466][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.806910][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.809479][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.811202][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.814262][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.946816][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.948582][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.949521][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.954069][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.965932][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.016005][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.020686][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.023077][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.032608][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.033593][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.143844][ T1230] cfg80211: failed to load regulatory.db [ 92.817584][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.889698][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 93.050691][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 93.395526][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 93.669930][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 93.692869][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.693597][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.694953][ T5839] bridge_slave_0: entered allmulticast mode [ 93.698686][ T5839] bridge_slave_0: entered promiscuous mode [ 93.895307][ T5838] Bluetooth: hci0: command tx timeout [ 93.905618][ T5156] Bluetooth: hci2: command tx timeout [ 93.905843][ T5838] Bluetooth: hci1: command tx timeout [ 93.957167][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.957336][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.957525][ T5839] bridge_slave_1: entered allmulticast mode [ 93.960755][ T5839] bridge_slave_1: entered promiscuous mode [ 94.053830][ T5156] Bluetooth: hci3: command tx timeout [ 94.054076][ T5838] Bluetooth: hci4: command tx timeout [ 94.056025][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.056171][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.056361][ T5836] bridge_slave_0: entered allmulticast mode [ 94.059053][ T5836] bridge_slave_0: entered promiscuous mode [ 94.276162][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.276308][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.276957][ T5836] bridge_slave_1: entered allmulticast mode [ 94.279787][ T5836] bridge_slave_1: entered promiscuous mode [ 94.486404][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.486516][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.486655][ T5835] bridge_slave_0: entered allmulticast mode [ 94.488521][ T5835] bridge_slave_0: entered promiscuous mode [ 94.631286][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.631822][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.631972][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.632142][ T5835] bridge_slave_1: entered allmulticast mode [ 94.661378][ T5835] bridge_slave_1: entered promiscuous mode [ 94.847524][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.920263][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.300146][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.375375][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.375599][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.375791][ T5853] bridge_slave_0: entered allmulticast mode [ 95.378649][ T5853] bridge_slave_0: entered promiscuous mode [ 95.472548][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.609635][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.609795][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.609987][ T5853] bridge_slave_1: entered allmulticast mode [ 95.611942][ T5853] bridge_slave_1: entered promiscuous mode [ 95.619554][ T5839] team0: Port device team_slave_0 added [ 95.627747][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.726696][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.726871][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.727044][ T5850] bridge_slave_0: entered allmulticast mode [ 95.728916][ T5850] bridge_slave_0: entered promiscuous mode [ 95.837214][ T5839] team0: Port device team_slave_1 added [ 95.943340][ T5836] team0: Port device team_slave_0 added [ 95.949089][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.949287][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.949525][ T5850] bridge_slave_1: entered allmulticast mode [ 95.952821][ T5850] bridge_slave_1: entered promiscuous mode [ 95.973996][ T5156] Bluetooth: hci2: command tx timeout [ 95.974029][ T5156] Bluetooth: hci0: command tx timeout [ 95.974195][ T5838] Bluetooth: hci1: command tx timeout [ 96.144134][ T5849] Bluetooth: hci3: command tx timeout [ 96.144227][ T5838] Bluetooth: hci4: command tx timeout [ 96.215862][ T5836] team0: Port device team_slave_1 added [ 96.501218][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.656491][ T5835] team0: Port device team_slave_0 added [ 96.740952][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.742335][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.742350][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.742378][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.846993][ T5835] team0: Port device team_slave_1 added [ 96.852304][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.946166][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.946183][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.946211][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.947893][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.947907][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.947935][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.052563][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.174608][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.174625][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.174648][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.348744][ T5853] team0: Port device team_slave_0 added [ 97.367950][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.367967][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.367994][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.528233][ T5853] team0: Port device team_slave_1 added [ 97.535255][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.535274][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.535307][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.540257][ T5850] team0: Port device team_slave_0 added [ 97.713341][ T5850] team0: Port device team_slave_1 added [ 98.054013][ T5838] Bluetooth: hci1: command tx timeout [ 98.054039][ T5849] Bluetooth: hci0: command tx timeout [ 98.054051][ T5838] Bluetooth: hci2: command tx timeout [ 98.168453][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.168471][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.168497][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.181529][ T5839] hsr_slave_0: entered promiscuous mode [ 98.183432][ T5839] hsr_slave_1: entered promiscuous mode [ 98.213749][ T5156] Bluetooth: hci4: command tx timeout [ 98.213779][ T5156] Bluetooth: hci3: command tx timeout [ 98.282955][ T5836] hsr_slave_0: entered promiscuous mode [ 98.284663][ T5836] hsr_slave_1: entered promiscuous mode [ 98.286001][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 98.286146][ T5836] Cannot create hsr debugfs directory [ 98.287349][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.287364][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.287394][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.420439][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.420457][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.420484][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.619975][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.619992][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.620018][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.636795][ T5835] hsr_slave_0: entered promiscuous mode [ 98.638421][ T5835] hsr_slave_1: entered promiscuous mode [ 98.639449][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 98.639475][ T5835] Cannot create hsr debugfs directory [ 99.272901][ T5853] hsr_slave_0: entered promiscuous mode [ 99.279718][ T5853] hsr_slave_1: entered promiscuous mode [ 99.280566][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 99.280589][ T5853] Cannot create hsr debugfs directory [ 99.547604][ T5850] hsr_slave_0: entered promiscuous mode [ 99.548898][ T5850] hsr_slave_1: entered promiscuous mode [ 99.549497][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 99.549523][ T5850] Cannot create hsr debugfs directory [ 100.134370][ T5849] Bluetooth: hci2: command tx timeout [ 100.134401][ T5849] Bluetooth: hci1: command tx timeout [ 100.144425][ T5156] Bluetooth: hci0: command tx timeout [ 100.294014][ T5156] Bluetooth: hci3: command tx timeout [ 100.294046][ T5156] Bluetooth: hci4: command tx timeout [ 100.794566][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.842763][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.879513][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.942366][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.059173][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.096057][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.131980][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.193351][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.362464][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.403568][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.459147][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.502364][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.660879][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.710127][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.755139][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.813110][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.967278][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.988902][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.049823][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.093144][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.132066][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.217504][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.270983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.271607][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.302423][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.346901][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.347079][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.433342][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.498681][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.503359][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.503520][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.584879][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.585089][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.654144][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.699388][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.708705][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.709026][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.771950][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.772171][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.908660][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.938758][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.017745][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.017953][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.088385][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.088637][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.165635][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.225377][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.225697][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.278355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.278502][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.338500][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.674401][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.725069][ T5839] veth0_vlan: entered promiscuous mode [ 103.790626][ T5839] veth1_vlan: entered promiscuous mode [ 103.847803][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.024990][ T5836] veth0_vlan: entered promiscuous mode [ 104.057573][ T5839] veth0_macvtap: entered promiscuous mode [ 104.099199][ T5839] veth1_macvtap: entered promiscuous mode [ 104.131065][ T5836] veth1_vlan: entered promiscuous mode [ 104.200551][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.252549][ T5835] veth0_vlan: entered promiscuous mode [ 104.265461][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.307613][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.324367][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.348517][ T5835] veth1_vlan: entered promiscuous mode [ 104.400128][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.417613][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.447415][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.452782][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.479666][ T5836] veth0_macvtap: entered promiscuous mode [ 104.588878][ T5836] veth1_macvtap: entered promiscuous mode [ 104.892531][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.923936][ T5835] veth0_macvtap: entered promiscuous mode [ 104.962763][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.990915][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.990938][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.030188][ T5835] veth1_macvtap: entered promiscuous mode [ 105.056983][ T5850] veth0_vlan: entered promiscuous mode [ 105.063360][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.090241][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.102124][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.135141][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.154777][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.154798][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.235894][ T5850] veth1_vlan: entered promiscuous mode [ 105.260565][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.380206][ T5853] veth0_vlan: entered promiscuous mode [ 105.394879][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.501481][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.525041][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.546040][ T5853] veth1_vlan: entered promiscuous mode [ 105.547715][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.566482][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.740292][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.740313][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.877334][ T5850] veth0_macvtap: entered promiscuous mode [ 106.017616][ T5850] veth1_macvtap: entered promiscuous mode [ 106.049730][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.049753][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.146199][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.146229][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.178954][ T5853] veth0_macvtap: entered promiscuous mode [ 106.213449][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.247438][ T5853] veth1_macvtap: entered promiscuous mode [ 106.289854][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.293367][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.293386][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.367974][ T1461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.402201][ T1461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.407926][ T1461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.419818][ T1461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.462388][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.511320][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.621891][ T3643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.642113][ T3643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.646514][ T3643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.687024][ T3643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.083669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.093673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.103648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.113642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.123646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.133647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.143658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.153640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.163638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.172445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.464460][ T5968] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 107.506231][ T5968] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'. [ 107.549505][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.549526][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.911336][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.911357][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.307348][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.307364][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.496618][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.496640][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.877726][ T5978] »»»»»»×[SRëåWß: renamed from lo (while UP) [ 110.228363][ T5981] input: syz0 as /devices/virtual/input/input5 [ 110.757648][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.762245][ T5989] 9pnet_fd: Insufficient options for proto=fd [ 111.595993][ T6001] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 111.596018][ T6001] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6001, name: syz.4.15 [ 111.596036][ T6001] preempt_count: 1, expected: 0 [ 111.596046][ T6001] RCU nest depth: 1, expected: 1 [ 111.596064][ T6001] 3 locks held by syz.4.15/6001: [ 111.596077][ T6001] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 [ 111.596159][ T6001] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 111.596216][ T6001] #2: ffff8880314f5298 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170 [ 111.596274][ T6001] Preemption disabled at: [ 111.596279][ T6001] [] bpf_test_timer_enter+0xf8/0x140 [ 111.596332][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.4.15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.596357][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.596378][ T6001] Call Trace: [ 111.596387][ T6001] [ 111.596397][ T6001] dump_stack_lvl+0x189/0x250 [ 111.596436][ T6001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.596468][ T6001] ? __pfx__printk+0x10/0x10 [ 111.596497][ T6001] ? print_lock_name+0xde/0x100 [ 111.596519][ T6001] ? bpf_test_timer_enter+0xf8/0x140 [ 111.596550][ T6001] __might_resched+0x44b/0x5d0 [ 111.596579][ T6001] ? bpf_test_timer_enter+0xf8/0x140 [ 111.596607][ T6001] ? __pfx___might_resched+0x10/0x10 [ 111.596632][ T6001] ? sock_map_delete_elem+0xb7/0x170 [ 111.596680][ T6001] rt_spin_lock+0xc7/0x2c0 [ 111.596709][ T6001] ? __pfx_rt_spin_lock+0x10/0x10 [ 111.596731][ T6001] ? ktime_get+0x3e/0x1f0 [ 111.596752][ T6001] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 111.596777][ T6001] ? __pfx___cant_migrate+0x10/0x10 [ 111.596805][ T6001] ? sock_map_delete_elem+0xa2/0x170 [ 111.596833][ T6001] sock_map_delete_elem+0xb7/0x170 [ 111.596870][ T6001] bpf_prog_a4deccfd5a7b07da+0x46/0x4e [ 111.596897][ T6001] bpf_flow_dissect+0x132/0x400 [ 111.596937][ T6001] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 111.596981][ T6001] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 111.597014][ T6001] ? __fget_files+0x2a/0x420 [ 111.597052][ T6001] ? __fget_files+0x2a/0x420 [ 111.597093][ T6001] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 111.597125][ T6001] bpf_prog_test_run+0x2ca/0x340 [ 111.597159][ T6001] __sys_bpf+0x581/0x870 [ 111.597188][ T6001] ? __pfx___sys_bpf+0x10/0x10 [ 111.597237][ T6001] ? rcu_is_watching+0x15/0xb0 [ 111.597278][ T6001] __x64_sys_bpf+0x7c/0x90 [ 111.597303][ T6001] do_syscall_64+0xfa/0x3b0 [ 111.597333][ T6001] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.597362][ T6001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.597383][ T6001] ? clear_bhb_loop+0x60/0xb0 [ 111.597410][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.597431][ T6001] RIP: 0033:0x7f9aa7e1ebe9 [ 111.597450][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.597467][ T6001] RSP: 002b:00007f9aa6044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.597489][ T6001] RAX: ffffffffffffffda RBX: 00007f9aa8056180 RCX: 00007f9aa7e1ebe9 [ 111.597504][ T6001] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 111.597518][ T6001] RBP: 00007f9aa7ea1e19 R08: 0000000000000000 R09: 0000000000000000 [ 111.597531][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.597544][ T6001] R13: 00007f9aa8056218 R14: 00007f9aa8056180 R15: 00007ffc9b360dc8 [ 111.597579][ T6001] [ 112.125656][ T6001] ------------[ cut here ]------------ [ 112.125671][ T6001] DEBUG_LOCKS_WARN_ON(this_cpu_read(softirq_ctrl.cnt)) [ 112.125767][ T6001] WARNING: CPU: 1 PID: 6001 at kernel/softirq.c:172 __local_bh_disable_ip+0x342/0x400 [ 112.125811][ T6001] Modules linked in: [ 112.125832][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.4.15 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 112.125861][ T6001] Tainted: [W]=WARN [ 112.125868][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.125880][ T6001] RIP: 0010:__local_bh_disable_ip+0x342/0x400 [ 112.125910][ T6001] Code: 0f b6 04 28 84 c0 0f 85 b5 00 00 00 83 3d 29 95 98 0d 00 75 19 90 48 c7 c7 00 b2 09 8b 48 c7 c6 40 b2 09 8b e8 df 61 fe ff 90 <0f> 0b 90 90 90 e9 fc fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 112.125928][ T6001] RSP: 0018:ffffc900053779a0 EFLAGS: 00010246 [ 112.125946][ T6001] RAX: 4a9d294651b42400 RBX: 1ffff92000a6ef38 RCX: 0000000000080000 [ 112.125963][ T6001] RDX: ffffc90011658000 RSI: 0000000000011612 RDI: 0000000000011613 [ 112.125978][ T6001] RBP: ffffc90005377a98 R08: 0000000000000000 R09: 0000000000000000 [ 112.125992][ T6001] R10: dffffc0000000000 R11: ffffed1017124863 R12: 1ffff1100660e519 [ 112.126008][ T6001] R13: dffffc0000000000 R14: ffffffff8184ca91 R15: ffff8880330728cc [ 112.126032][ T6001] FS: 00007f9aa60446c0(0000) GS:ffff8881269c1000(0000) knlGS:0000000000000000 [ 112.126050][ T6001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.126065][ T6001] CR2: 0000000000000000 CR3: 0000000036fe2000 CR4: 00000000003526f0 [ 112.126083][ T6001] Call Trace: [ 112.126091][ T6001] [ 112.126102][ T6001] ? sock_map_delete_elem+0xa2/0x170 [ 112.126133][ T6001] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 112.126160][ T6001] ? ktime_get+0x3e/0x1f0 [ 112.126180][ T6001] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 112.126203][ T6001] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 112.126228][ T6001] ? __pfx___cant_migrate+0x10/0x10 [ 112.126253][ T6001] ? sock_map_delete_elem+0xa2/0x170 [ 112.126280][ T6001] sock_map_delete_elem+0xaf/0x170 [ 112.126311][ T6001] bpf_prog_a4deccfd5a7b07da+0x46/0x4e [ 112.126351][ T6001] bpf_flow_dissect+0x132/0x400 [ 112.126387][ T6001] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 112.126422][ T6001] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 112.126453][ T6001] ? __fget_files+0x2a/0x420 [ 112.126487][ T6001] ? __fget_files+0x2a/0x420 [ 112.126519][ T6001] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 112.126548][ T6001] bpf_prog_test_run+0x2ca/0x340 [ 112.126578][ T6001] __sys_bpf+0x581/0x870 [ 112.126604][ T6001] ? __pfx___sys_bpf+0x10/0x10 [ 112.126639][ T6001] ? rcu_is_watching+0x15/0xb0 [ 112.126674][ T6001] __x64_sys_bpf+0x7c/0x90 [ 112.126697][ T6001] do_syscall_64+0xfa/0x3b0 [ 112.126726][ T6001] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.126765][ T6001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.126788][ T6001] ? clear_bhb_loop+0x60/0xb0 [ 112.126810][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.126829][ T6001] RIP: 0033:0x7f9aa7e1ebe9 [ 112.126846][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.126863][ T6001] RSP: 002b:00007f9aa6044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.126884][ T6001] RAX: ffffffffffffffda RBX: 00007f9aa8056180 RCX: 00007f9aa7e1ebe9 [ 112.126899][ T6001] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 112.126913][ T6001] RBP: 00007f9aa7ea1e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.126926][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.126938][ T6001] R13: 00007f9aa8056218 R14: 00007f9aa8056180 R15: 00007ffc9b360dc8 [ 112.126961][ T6001] [ 112.126972][ T6001] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.126990][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.4.15 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 112.127027][ T6001] Tainted: [W]=WARN [ 112.127035][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.127048][ T6001] Call Trace: [ 112.127056][ T6001] [ 112.127064][ T6001] dump_stack_lvl+0x99/0x250 [ 112.127097][ T6001] ? __asan_memcpy+0x40/0x70 [ 112.127119][ T6001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.127153][ T6001] ? __pfx__printk+0x10/0x10 [ 112.127182][ T6001] vpanic+0x281/0x750 [ 112.127212][ T6001] ? __pfx__printk+0x10/0x10 [ 112.127232][ T6001] ? __pfx_vpanic+0x10/0x10 [ 112.127262][ T6001] ? is_bpf_text_address+0x26/0x2b0 [ 112.127295][ T6001] panic+0xb9/0xc0 [ 112.127325][ T6001] ? __pfx_panic+0x10/0x10 [ 112.127360][ T6001] __warn+0x31b/0x4b0 [ 112.127391][ T6001] ? __local_bh_disable_ip+0x342/0x400 [ 112.127418][ T6001] ? __local_bh_disable_ip+0x342/0x400 [ 112.127444][ T6001] report_bug+0x2be/0x4f0 [ 112.127470][ T6001] ? __local_bh_disable_ip+0x342/0x400 [ 112.127497][ T6001] ? __local_bh_disable_ip+0x342/0x400 [ 112.127523][ T6001] ? __local_bh_disable_ip+0x344/0x400 [ 112.127550][ T6001] handle_bug+0x84/0x160 [ 112.127596][ T6001] exc_invalid_op+0x1a/0x50 [ 112.127628][ T6001] asm_exc_invalid_op+0x1a/0x20 [ 112.127648][ T6001] RIP: 0010:__local_bh_disable_ip+0x342/0x400 [ 112.127676][ T6001] Code: 0f b6 04 28 84 c0 0f 85 b5 00 00 00 83 3d 29 95 98 0d 00 75 19 90 48 c7 c7 00 b2 09 8b 48 c7 c6 40 b2 09 8b e8 df 61 fe ff 90 <0f> 0b 90 90 90 e9 fc fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 112.127694][ T6001] RSP: 0018:ffffc900053779a0 EFLAGS: 00010246 [ 112.127713][ T6001] RAX: 4a9d294651b42400 RBX: 1ffff92000a6ef38 RCX: 0000000000080000 [ 112.127729][ T6001] RDX: ffffc90011658000 RSI: 0000000000011612 RDI: 0000000000011613 [ 112.127744][ T6001] RBP: ffffc90005377a98 R08: 0000000000000000 R09: 0000000000000000 [ 112.127757][ T6001] R10: dffffc0000000000 R11: ffffed1017124863 R12: 1ffff1100660e519 [ 112.127814][ T6001] R13: dffffc0000000000 R14: ffffffff8184ca91 R15: ffff8880330728cc [ 112.127840][ T6001] ? __local_bh_disable_ip+0xa1/0x400 [ 112.127878][ T6001] ? sock_map_delete_elem+0xa2/0x170 [ 112.127907][ T6001] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 112.127933][ T6001] ? ktime_get+0x3e/0x1f0 [ 112.127954][ T6001] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 112.127977][ T6001] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 112.128002][ T6001] ? __pfx___cant_migrate+0x10/0x10 [ 112.128052][ T6001] ? sock_map_delete_elem+0xa2/0x170 [ 112.128082][ T6001] sock_map_delete_elem+0xaf/0x170 [ 112.128115][ T6001] bpf_prog_a4deccfd5a7b07da+0x46/0x4e [ 112.128135][ T6001] bpf_flow_dissect+0x132/0x400 [ 112.128170][ T6001] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 112.128205][ T6001] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 112.128235][ T6001] ? __fget_files+0x2a/0x420 [ 112.128280][ T6001] ? __fget_files+0x2a/0x420 [ 112.128313][ T6001] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 112.128342][ T6001] bpf_prog_test_run+0x2ca/0x340 [ 112.128372][ T6001] __sys_bpf+0x581/0x870 [ 112.128398][ T6001] ? __pfx___sys_bpf+0x10/0x10 [ 112.128432][ T6001] ? rcu_is_watching+0x15/0xb0 [ 112.128467][ T6001] __x64_sys_bpf+0x7c/0x90 [ 112.128489][ T6001] do_syscall_64+0xfa/0x3b0 [ 112.128516][ T6001] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.128543][ T6001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.128563][ T6001] ? clear_bhb_loop+0x60/0xb0 [ 112.128585][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.128606][ T6001] RIP: 0033:0x7f9aa7e1ebe9 [ 112.128623][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.128641][ T6001] RSP: 002b:00007f9aa6044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.128663][ T6001] RAX: ffffffffffffffda RBX: 00007f9aa8056180 RCX: 00007f9aa7e1ebe9 [ 112.128679][ T6001] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 112.128693][ T6001] RBP: 00007f9aa7ea1e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.128706][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.128719][ T6001] R13: 00007f9aa8056218 R14: 00007f9aa8056180 R15: 00007ffc9b360dc8 [ 112.128742][ T6001] [ 112.129129][ T6001] Kernel Offset: disabled