last executing test programs: 2.526434416s ago: executing program 2 (id=160): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 1.251051627s ago: executing program 2 (id=180): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x5, 0x80801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = eventfd2(0x7, 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r2}) 1.120032576s ago: executing program 2 (id=183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x2, 0x6, 0x2, 0x10001, 0x3, "79b47434648fbe3e22974a0739c3d4757c9b46", 0x492f, 0x3}) r1 = epoll_create(0x203) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x18}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xa) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x8, 0x7, 0x96, 0xf, 0x6, "22755e78f3217093c636c9f04a67b0574d15cd", 0x7fffffff, 0x4}) 1.002273411s ago: executing program 2 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 934.337172ms ago: executing program 2 (id=188): r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) 816.781724ms ago: executing program 0 (id=190): mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000640)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x20001, 0x91) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="98da", 0x2}], 0x1, 0x4) 816.376136ms ago: executing program 0 (id=191): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x6}, &(0x7f0000000140)=0x20) 723.907288ms ago: executing program 0 (id=192): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) 716.314842ms ago: executing program 3 (id=193): r0 = userfaultfd(0x80001) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 664.317449ms ago: executing program 3 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 580.096544ms ago: executing program 3 (id=196): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 579.472393ms ago: executing program 0 (id=197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000700)=""/252, 0xfc}], 0x2}}], 0x1, 0x10000, 0x0) 578.126201ms ago: executing program 0 (id=198): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 505.452297ms ago: executing program 3 (id=200): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 505.148808ms ago: executing program 1 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e21, 0x1, @local, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x2, 0x2}}, 0xfdef) 443.873111ms ago: executing program 1 (id=202): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 338.350999ms ago: executing program 3 (id=203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) close(0x3) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @hyper}, 0x10) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000002640)={0x4000000, 0x0, 0x0, 0x8, 0x1000, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 289.261596ms ago: executing program 0 (id=204): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000800)) 187.170834ms ago: executing program 3 (id=205): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=']) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 177.269998ms ago: executing program 1 (id=206): r0 = creat(&(0x7f0000000080)='./file1\x00', 0x13e) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 90.552119ms ago: executing program 1 (id=207): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x17aa, &(0x7f0000000080)={0x0, 0xedd9, 0x40, 0x2, 0x116}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 87.977391ms ago: executing program 1 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0xdedc, 0x5, 0x9, 0x81, 0x101, 0x7, 0x2, 0x7fffffff, 0xfffffffd, 0xd, 0xb, 0x3, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x0) 2.063181ms ago: executing program 2 (id=209): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r0, &(0x7f0000000040)='.\x00', 0x4000, 0x40, 0x0) 0s ago: executing program 1 (id=210): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33087' (ED25519) to the list of known hosts. [ 57.657539][ T5926] cgroup: Unknown subsys name 'net' [ 57.764841][ T5926] cgroup: Unknown subsys name 'cpuset' [ 57.770960][ T5926] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.907571][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.839061][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.843434][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.851386][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.855346][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.858602][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.859474][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.865281][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.867801][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.870591][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.873328][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.873909][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.877233][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.879288][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.882098][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.885435][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.888714][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.890466][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.895130][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.896458][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.898100][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.281731][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 63.299802][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 63.350729][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 63.356963][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 63.454060][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.456751][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.459055][ T5952] bridge_slave_0: entered allmulticast mode [ 63.463045][ T5952] bridge_slave_0: entered promiscuous mode [ 63.485410][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.488334][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.491642][ T5952] bridge_slave_1: entered allmulticast mode [ 63.495131][ T5952] bridge_slave_1: entered promiscuous mode [ 63.542923][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.546522][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.549357][ T5939] bridge_slave_0: entered allmulticast mode [ 63.552107][ T5939] bridge_slave_0: entered promiscuous mode [ 63.569412][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.572108][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.574729][ T5940] bridge_slave_0: entered allmulticast mode [ 63.577459][ T5940] bridge_slave_0: entered promiscuous mode [ 63.580467][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.582855][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.585128][ T5939] bridge_slave_1: entered allmulticast mode [ 63.587748][ T5939] bridge_slave_1: entered promiscuous mode [ 63.592890][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.605839][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.608335][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.611314][ T5940] bridge_slave_1: entered allmulticast mode [ 63.615136][ T5940] bridge_slave_1: entered promiscuous mode [ 63.638584][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.642643][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.645459][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.648411][ T5948] bridge_slave_0: entered allmulticast mode [ 63.652888][ T5948] bridge_slave_0: entered promiscuous mode [ 63.686490][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.689533][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.692620][ T5948] bridge_slave_1: entered allmulticast mode [ 63.696655][ T5948] bridge_slave_1: entered promiscuous mode [ 63.702879][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.708728][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.733946][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.738957][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.743193][ T5952] team0: Port device team_slave_0 added [ 63.768296][ T5952] team0: Port device team_slave_1 added [ 63.777637][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.806926][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.812647][ T5940] team0: Port device team_slave_0 added [ 63.827133][ T5939] team0: Port device team_slave_0 added [ 63.832023][ T5940] team0: Port device team_slave_1 added [ 63.845317][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.848273][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.858921][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.866076][ T5939] team0: Port device team_slave_1 added [ 63.869593][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.872580][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.883160][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.926044][ T5948] team0: Port device team_slave_0 added [ 63.928258][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.930540][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.938458][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.954756][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.957582][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.969839][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.975536][ T5948] team0: Port device team_slave_1 added [ 63.978275][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.980651][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.988566][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.996954][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.999174][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.007171][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.063837][ T5952] hsr_slave_0: entered promiscuous mode [ 64.066086][ T5952] hsr_slave_1: entered promiscuous mode [ 64.081178][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.083647][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.091845][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.097620][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.100390][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.109706][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.128921][ T5940] hsr_slave_0: entered promiscuous mode [ 64.132297][ T5940] hsr_slave_1: entered promiscuous mode [ 64.135282][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 64.137799][ T5940] Cannot create hsr debugfs directory [ 64.194893][ T5939] hsr_slave_0: entered promiscuous mode [ 64.198139][ T5939] hsr_slave_1: entered promiscuous mode [ 64.201067][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 64.203489][ T5939] Cannot create hsr debugfs directory [ 64.285629][ T5948] hsr_slave_0: entered promiscuous mode [ 64.288762][ T5948] hsr_slave_1: entered promiscuous mode [ 64.291856][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 64.294235][ T5948] Cannot create hsr debugfs directory [ 64.657400][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.665760][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.670912][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.683078][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.734845][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.742708][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.749579][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.757172][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.840370][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.851006][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.866526][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.872125][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.950064][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.964667][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.972791][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.980798][ T5955] Bluetooth: hci0: command tx timeout [ 64.980829][ T5949] Bluetooth: hci3: command tx timeout [ 64.980877][ T5944] Bluetooth: hci2: command tx timeout [ 64.983501][ T5956] Bluetooth: hci1: command tx timeout [ 64.988140][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.990875][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.022634][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.056491][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.064110][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.075856][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.078954][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.096627][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.099581][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.105496][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.108416][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.120817][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.123770][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.192175][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.229594][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.253688][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.256489][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.286474][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.288752][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.306780][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.380547][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.404983][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.407973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.432159][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.434870][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.447720][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.457294][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.538084][ T5952] veth0_vlan: entered promiscuous mode [ 65.547368][ T5940] veth0_vlan: entered promiscuous mode [ 65.555794][ T5952] veth1_vlan: entered promiscuous mode [ 65.564015][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.572233][ T5940] veth1_vlan: entered promiscuous mode [ 65.605147][ T5952] veth0_macvtap: entered promiscuous mode [ 65.614002][ T5952] veth1_macvtap: entered promiscuous mode [ 65.643223][ T5948] veth0_vlan: entered promiscuous mode [ 65.647581][ T5940] veth0_macvtap: entered promiscuous mode [ 65.657973][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.662001][ T5940] veth1_macvtap: entered promiscuous mode [ 65.665616][ T5948] veth1_vlan: entered promiscuous mode [ 65.679894][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.693477][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.702817][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.708257][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.715314][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.722570][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.744333][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.748658][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.756323][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.778738][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.783570][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793208][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.863455][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.866689][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.874752][ T5948] veth0_macvtap: entered promiscuous mode [ 65.915740][ T5948] veth1_macvtap: entered promiscuous mode [ 65.941764][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.946440][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.955435][ T5939] veth0_vlan: entered promiscuous mode [ 65.962912][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.963664][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.968091][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.972957][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.986996][ T5939] veth1_vlan: entered promiscuous mode [ 65.992992][ T103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996016][ T103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.000968][ T103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.000978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.000995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.005283][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.008163][ T103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.108185][ T5939] veth0_macvtap: entered promiscuous mode [ 66.111967][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.119794][ T5939] veth1_macvtap: entered promiscuous mode [ 66.126532][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.127764][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.128891][ T6033] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 66.128909][ T6033] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 66.128919][ T6033] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.128935][ T6033] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 66.128947][ T6033] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.129127][ T6033] Zero length message leads to an empty skb [ 66.134997][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.176893][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.202664][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.205944][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.209032][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.235633][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.238999][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.245379][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.248137][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.335523][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.344356][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.373982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.380210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.596641][ T6053] CIFS: VFS: Malformed UNC in devname [ 66.836726][ T6064] Bluetooth: MGMT ver 1.23 [ 66.857065][ T6066] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 67.059827][ T5956] Bluetooth: hci1: command tx timeout [ 67.062907][ T5956] Bluetooth: hci0: command tx timeout [ 67.065376][ T5956] Bluetooth: hci3: command tx timeout [ 67.066969][ T5949] Bluetooth: hci2: command tx timeout [ 67.110464][ T6080] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 67.134394][ T6084] Bluetooth: hci0: unsupported parameter 255 [ 67.136644][ T6084] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 67.219064][ T6089] binder: 6085:6089 ioctl c0306201 80000480 returned -14 [ 67.247629][ T6091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.273325][ T6091] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 67.277598][ T6091] overlayfs: failed to look up (tracing) for ino (-66) [ 67.684935][ T6108] mkiss: ax0: crc mode is auto. [ 67.835241][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 67.865918][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 68.231670][ T6154] netlink: 84 bytes leftover after parsing attributes in process `syz.2.49'. [ 68.345405][ T6160] input: syz0 as /devices/virtual/input/input5 [ 68.409899][ T6007] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.600496][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.604943][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.608995][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.615159][ T6007] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.618799][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.624517][ T6007] usb 6-1: config 0 descriptor?? [ 68.640614][ T6181] kvm: user requested TSC rate below hardware speed [ 68.648210][ T6181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 69.053287][ T6007] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.150615][ T5949] Bluetooth: hci3: command tx timeout [ 69.150675][ T5956] Bluetooth: hci1: command tx timeout [ 69.150708][ T5944] Bluetooth: hci2: command tx timeout [ 69.157606][ T5955] Bluetooth: hci0: command tx timeout [ 69.503624][ T6203] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.967911][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 69.987020][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 69.990811][ T6220] bridge_slave_1: left allmulticast mode [ 69.992955][ T6220] bridge_slave_1: left promiscuous mode [ 69.995470][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.004315][ T6220] bridge_slave_0: left allmulticast mode [ 70.006356][ T6220] bridge_slave_0: left promiscuous mode [ 70.008611][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.485462][ T6224] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.559873][ T6224] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 70.641244][ T6226] Illegal XDP return value 4294967294 on prog (id 24) dev N/A, expect packet loss! [ 70.918030][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 70.954904][ T6247] vxlan0: entered promiscuous mode [ 70.959244][ T1253] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.963037][ T1253] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.965798][ T1253] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.968751][ T1253] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.056995][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 71.064712][ T6253] vxlan0: entered promiscuous mode [ 71.067605][ T56] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.072479][ T56] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.076113][ T56] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.078440][ T5988] usb 6-1: USB disconnect, device number 2 [ 71.084447][ T56] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.219806][ T5955] Bluetooth: hci2: command tx timeout [ 71.222108][ T5955] Bluetooth: hci3: command tx timeout [ 71.224269][ T5955] Bluetooth: hci1: command tx timeout [ 71.230403][ T5955] Bluetooth: hci0: command tx timeout [ 71.749835][ T6283] input: syz0 as /devices/virtual/input/input7 [ 71.906604][ T40] audit: type=1326 audit(1766258935.172:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.3.104" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f97579 code=0x0 [ 71.985452][ T6298] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 71.988945][ T6298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 72.433543][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 72.965317][ T40] audit: type=1326 audit(1766258936.232:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7fc00000 [ 73.119818][ T6008] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.269724][ T6008] usb 6-1: Using ep0 maxpacket: 16 [ 73.273876][ T6008] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.277982][ T6008] usb 6-1: config 0 interface 0 has no altsetting 0 [ 73.281290][ T6008] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 73.284689][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.289922][ T6008] usb 6-1: config 0 descriptor?? [ 73.623668][ T40] audit: type=1326 audit(1766258936.892:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.117" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97579 code=0x7fc00000 [ 73.723322][ T6008] nzxt-smart2 0003:1E71:2009.0003: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 73.780494][ T5988] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 73.783823][ T5988] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 73.788795][ T6397] capability: warning: `syz.0.138' uses deprecated v2 capabilities in a way that may be insecure [ 73.792695][ T5955] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.872193][ T6402] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.139'. [ 74.160926][ T6008] usb 6-1: USB disconnect, device number 3 [ 74.499808][ T12] wlan1: Trigger new scan to find an IBSS to join [ 75.361243][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 75.365975][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 75.475792][ T6460] input: syz0 as /devices/virtual/input/input9 [ 75.624851][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 75.859739][ T5988] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 75.862228][ T5988] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 75.872256][ T6482] overlayfs: upper fs does not support file handles, falling back to index=off. [ 75.875196][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.876373][ T6482] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 76.190097][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.192736][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.270543][ T53] hid-generic 0000:0003:0001.0004: unknown main item tag 0x0 [ 76.273891][ T53] hid-generic 0000:0003:0001.0004: unknown main item tag 0x0 [ 76.287532][ T53] hid-generic 0000:0003:0001.0004: hidraw1: HID v0.03 Device [syz0] on syz1 [ 76.352280][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.400969][ T6500] input: syz0 as /devices/virtual/input/input10 [ 77.188767][ T6533] input: syz1 as /devices/virtual/input/input11 [ 77.249406][ T6537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.563549][ T6559] netlink: 'syz.1.202': attribute type 8 has an invalid length. [ 77.566437][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 77.578374][ T6559] bond0: entered promiscuous mode [ 77.580579][ T6559] bond_slave_0: entered promiscuous mode [ 77.583118][ T6559] bond_slave_1: entered promiscuous mode [ 77.587503][ T6559] gretap0: entered promiscuous mode [ 77.591431][ T6559] bond0: left promiscuous mode [ 77.593583][ T6559] bond_slave_0: left promiscuous mode [ 77.596188][ T6559] bond_slave_1: left promiscuous mode [ 77.601420][ T6559] gretap0: left promiscuous mode [ 77.931406][ T40] audit: type=1326 audit(1766258941.202:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.209" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22579 code=0x0 [ 77.940400][ T5988] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 77.943046][ T5988] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 77.949677][ C0] ------------[ cut here ]------------ [ 77.952033][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 77.954721][ C0] WARNING: kernel/workqueue.c:2251 at __queue_work+0xc9d/0x10e0, CPU#0: syz-executor/5940 [ 77.958326][ C0] Modules linked in: [ 77.959651][ C0] CPU: 0 UID: 0 PID: 5940 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 77.963938][ C0] Tainted: [L]=SOFTLOCKUP [ 77.965700][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.969596][ C0] RIP: 0010:__queue_work+0xca1/0x10e0 [ 77.971555][ C0] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d f3 90 07 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 d0 11 3a 00 90 0f 0b 90 e9 15 f6 [ 77.979220][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010046 [ 77.981680][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11009417951 [ 77.984852][ C0] RDX: ffff8880487c4178 RSI: ffffffff8a68d660 RDI: ffffffff908bd7d0 [ 77.988007][ C0] RBP: ffff88804a0bca70 R08: 0000000000000005 R09: 0000000000000000 [ 77.991214][ C0] R10: 0000000000000100 R11: ffff888023718b30 R12: 1ffff92000000f8f [ 77.994377][ C0] R13: ffffffff81845820 R14: 0000000080000100 R15: ffff8880487c4000 [ 77.997539][ C0] FS: 0000000000000000(0000) GS:ffff8880976fc000(0063) knlGS:00000000574b1440 [ 78.001095][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 78.003746][ C0] CR2: 00000000f7427250 CR3: 000000002926a000 CR4: 0000000000352ef0 [ 78.006934][ C0] Call Trace: [ 78.008319][ C0] [ 78.009941][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.012689][ C0] call_timer_fn+0x19a/0x5a0 [ 78.014683][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 78.016861][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.019311][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.021807][ C0] ? __run_timers+0x559/0xae0 [ 78.023797][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.026281][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.028749][ C0] __run_timers+0x569/0xae0 [ 78.030710][ C0] ? __pfx___run_timers+0x10/0x10 [ 78.032885][ C0] run_timer_base+0x114/0x190 [ 78.034706][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 78.036919][ C0] run_timer_softirq+0x1a/0x40 [ 78.038916][ C0] handle_softirqs+0x219/0x950 [ 78.040962][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 78.043199][ C0] __irq_exit_rcu+0x109/0x170 [ 78.045207][ C0] irq_exit_rcu+0x9/0x30 [ 78.047004][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 78.049380][ C0] [ 78.050641][ C0] [ 78.051868][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 78.054384][ C0] RIP: 0010:stack_access_ok+0x53/0x200 [ 78.056679][ C0] Code: 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 52 01 00 00 48 89 da 48 8b 4b 10 48 b8 00 00 00 00 00 fc ff [ 78.064655][ C0] RSP: 0018:ffffc90003f86b58 EFLAGS: 00000246 [ 78.067218][ C0] RAX: dffffc0000000000 RBX: ffffc90003f86c08 RCX: ffffffff912e75cc [ 78.070540][ C0] RDX: 1ffff920007f0d83 RSI: ffffc90003f87568 RDI: ffffc90003f86c08 [ 78.073880][ C0] RBP: ffffc90003f87568 R08: 0000000000000001 R09: 0000000088be6a78 [ 78.077133][ C0] R10: 0000000000000002 R11: 00000000000115ba R12: 0000000000000008 [ 78.080442][ C0] R13: ffffc90003f86c18 R14: ffffc90003f86c10 R15: ffffc90003f80000 [ 78.083730][ C0] unwind_next_frame+0x1509/0x20b0 [ 78.085894][ C0] ? __get_vm_area_node+0x1ca/0x330 [ 78.088115][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.090801][ C0] arch_stack_walk+0x94/0x100 [ 78.092879][ C0] ? __vmalloc_node_range_noprof+0x247/0x16b0 [ 78.095485][ C0] stack_trace_save+0x8e/0xc0 [ 78.097519][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 78.099790][ C0] ? __lock_acquire+0x436/0x2890 [ 78.101908][ C0] ? stack_trace_save+0x8e/0xc0 [ 78.103987][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 78.106273][ C0] save_stack+0x160/0x1f0 [ 78.108137][ C0] ? __pfx_save_stack+0x10/0x10 [ 78.110155][ C0] ? post_alloc_hook+0x1af/0x220 [ 78.112295][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 78.114696][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 78.117272][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 78.119381][ C0] ? alloc_pages_noprof+0x131/0x390 [ 78.121585][ C0] ? get_free_pages_noprof+0x10/0xb0 [ 78.123814][ C0] ? __kasan_populate_vmalloc+0xa0/0x220 [ 78.126207][ C0] ? alloc_vmap_area+0x98d/0x2a50 [ 78.128381][ C0] ? __get_vm_area_node+0x1ca/0x330 [ 78.130601][ C0] ? __lock_acquire+0x436/0x2890 [ 78.132724][ C0] __set_page_owner+0x91/0x560 [ 78.134754][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 78.137010][ C0] ? bad_range+0x261/0x4c0 [ 78.138866][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.141081][ C0] post_alloc_hook+0x1af/0x220 [ 78.143134][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 78.145460][ C0] ? __pfx___might_resched+0x10/0x10 [ 78.147712][ C0] ? should_fail_alloc_page+0xee/0x130 [ 78.150059][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 78.152587][ C0] ? find_held_lock+0x2b/0x80 [ 78.154598][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 78.156822][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 78.158875][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 78.161557][ C0] ? kernel_text_address+0x8d/0x100 [ 78.163755][ C0] ? __kernel_text_address+0xd/0x40 [ 78.165972][ C0] ? unwind_get_return_address+0x59/0xa0 [ 78.168337][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.170831][ C0] ? policy_nodemask+0xea/0x4e0 [ 78.172952][ C0] alloc_pages_mpol+0x1fb/0x550 [ 78.175028][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 78.177300][ C0] ? kasan_save_stack+0x42/0x60 [ 78.179380][ C0] ? kasan_save_track+0x14/0x30 [ 78.181459][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 78.183492][ C0] ? __get_vm_area_node+0x101/0x330 [ 78.185816][ C0] alloc_pages_noprof+0x131/0x390 [ 78.187977][ C0] get_free_pages_noprof+0x10/0xb0 [ 78.190163][ C0] __kasan_populate_vmalloc+0xa0/0x220 [ 78.192559][ C0] alloc_vmap_area+0x98d/0x2a50 [ 78.194638][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 78.196901][ C0] __get_vm_area_node+0x1ca/0x330 [ 78.199059][ C0] __vmalloc_node_range_noprof+0x247/0x16b0 [ 78.201610][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.203917][ C0] ? lock_acquire+0x179/0x330 [ 78.205939][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.208303][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 78.210357][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.213028][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 78.215061][ C0] ? __lock_acquire+0x436/0x2890 [ 78.217219][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 78.219369][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.221693][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 78.223855][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.226177][ C0] xt_compat_init_offsets+0xe6/0x1f0 [ 78.228431][ C0] ? __asan_memcpy+0x3c/0x60 [ 78.230394][ C0] compat_table_info+0xb7/0x5f0 [ 78.232475][ C0] ? xt_find_table_lock+0x144/0x520 [ 78.234672][ C0] compat_get_entries+0x211/0x860 [ 78.236783][ C0] ? find_held_lock+0x2b/0x80 [ 78.238789][ C0] ? __might_fault+0xe3/0x190 [ 78.240796][ C0] ? __might_fault+0xe3/0x190 [ 78.242819][ C0] ? __pfx_compat_get_entries+0x10/0x10 [ 78.245188][ C0] ? lock_acquire+0x179/0x330 [ 78.247205][ C0] ? __pfx___might_resched+0x10/0x10 [ 78.249477][ C0] ? bpf_lsm_capable+0x9/0x10 [ 78.251477][ C0] ? security_capable+0x7e/0x260 [ 78.253614][ C0] do_ip6t_get_ctl+0x51f/0xa50 [ 78.255675][ C0] ? __mutex_unlock_slowpath+0x161/0x790 [ 78.258059][ C0] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 78.260310][ C0] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 78.262866][ C0] nf_getsockopt+0x7c/0xe0 [ 78.264798][ C0] ipv6_getsockopt+0x1f7/0x280 [ 78.266830][ C0] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 78.269090][ C0] tcp_getsockopt+0xa1/0x100 [ 78.271073][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 78.273594][ C0] do_sock_getsockopt+0x324/0x410 [ 78.275745][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 78.278116][ C0] ? find_held_lock+0x2b/0x80 [ 78.280128][ C0] ? __might_fault+0xe3/0x190 [ 78.282132][ C0] __sys_getsockopt+0x123/0x1b0 [ 78.284220][ C0] __ia32_compat_sys_socketcall+0x4ba/0x780 [ 78.286735][ C0] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 78.289431][ C0] ? fput_close_sync+0x11d/0x260 [ 78.291479][ C0] __do_fast_syscall_32+0xe8/0x680 [ 78.293691][ C0] do_fast_syscall_32+0x32/0x80 [ 78.295761][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.298460][ C0] RIP: 0023:0xf7f97579 [ 78.300204][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.308220][ C0] RSP: 002b:00000000ffe7ead0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 78.311543][ C0] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffe7eb08 [ 78.314852][ C0] RDX: 00000000ffe7eb84 RSI: 00000000ffe7ebdc RDI: 00000000f7426ff4 [ 78.318177][ C0] RBP: 00000000f7428ba0 R08: 0000000000000000 R09: 0000000000000000 [ 78.321506][ C0] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 78.324836][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.328166][ C0] [ 78.329506][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.332578][ C0] CPU: 0 UID: 0 PID: 5940 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 78.336977][ C0] Tainted: [L]=SOFTLOCKUP [ 78.338745][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.343201][ C0] Call Trace: [ 78.344645][ C0] [ 78.345887][ C0] dump_stack_lvl+0x3d/0x1f0 [ 78.347869][ C0] vpanic+0x640/0x6f0 [ 78.349590][ C0] ? __queue_work+0xc9d/0x10e0 [ 78.351630][ C0] panic+0xca/0xd0 [ 78.353170][ C0] ? __pfx_panic+0x10/0x10 [ 78.355091][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 78.357265][ C0] check_panic_on_warn+0xab/0xb0 [ 78.359399][ C0] __warn+0x108/0x3c0 [ 78.361132][ C0] __report_bug+0x2a0/0x520 [ 78.363071][ C0] ? __queue_work+0xc9d/0x10e0 [ 78.365061][ C0] ? __pfx___report_bug+0x10/0x10 [ 78.367156][ C0] ? kernel_text_address+0x8d/0x100 [ 78.369366][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 78.371633][ C0] ? look_up_lock_class+0x59/0x130 [ 78.373835][ C0] report_bug_entry+0xe1/0x290 [ 78.375882][ C0] ? __queue_work+0xca1/0x10e0 [ 78.377949][ C0] handle_bug+0x18a/0x260 [ 78.379789][ C0] exc_invalid_op+0x17/0x50 [ 78.381799][ C0] asm_exc_invalid_op+0x1a/0x20 [ 78.383860][ C0] RIP: 0010:__queue_work+0xca1/0x10e0 [ 78.386149][ C0] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d f3 90 07 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 d0 11 3a 00 90 0f 0b 90 e9 15 f6 [ 78.394127][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010046 [ 78.396637][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11009417951 [ 78.399979][ C0] RDX: ffff8880487c4178 RSI: ffffffff8a68d660 RDI: ffffffff908bd7d0 [ 78.403367][ C0] RBP: ffff88804a0bca70 R08: 0000000000000005 R09: 0000000000000000 [ 78.406687][ C0] R10: 0000000000000100 R11: ffff888023718b30 R12: 1ffff92000000f8f [ 78.409994][ C0] R13: ffffffff81845820 R14: 0000000080000100 R15: ffff8880487c4000 [ 78.413344][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.415803][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 78.418035][ C0] ? __queue_work+0xc70/0x10e0 [ 78.420222][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.422727][ C0] call_timer_fn+0x19a/0x5a0 [ 78.424709][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 78.426874][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.429337][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.431825][ C0] ? __run_timers+0x559/0xae0 [ 78.433863][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.436365][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 78.438825][ C0] __run_timers+0x569/0xae0 [ 78.440780][ C0] ? __pfx___run_timers+0x10/0x10 [ 78.442957][ C0] run_timer_base+0x114/0x190 [ 78.444976][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 78.447177][ C0] run_timer_softirq+0x1a/0x40 [ 78.449227][ C0] handle_softirqs+0x219/0x950 [ 78.451293][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 78.453567][ C0] __irq_exit_rcu+0x109/0x170 [ 78.455575][ C0] irq_exit_rcu+0x9/0x30 [ 78.457407][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 78.459765][ C0] [ 78.461032][ C0] [ 78.462332][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 78.464852][ C0] RIP: 0010:stack_access_ok+0x53/0x200 [ 78.467166][ C0] Code: 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 52 01 00 00 48 89 da 48 8b 4b 10 48 b8 00 00 00 00 00 fc ff [ 78.475219][ C0] RSP: 0018:ffffc90003f86b58 EFLAGS: 00000246 [ 78.477798][ C0] RAX: dffffc0000000000 RBX: ffffc90003f86c08 RCX: ffffffff912e75cc [ 78.481140][ C0] RDX: 1ffff920007f0d83 RSI: ffffc90003f87568 RDI: ffffc90003f86c08 [ 78.484437][ C0] RBP: ffffc90003f87568 R08: 0000000000000001 R09: 0000000088be6a78 [ 78.487732][ C0] R10: 0000000000000002 R11: 00000000000115ba R12: 0000000000000008 [ 78.491038][ C0] R13: ffffc90003f86c18 R14: ffffc90003f86c10 R15: ffffc90003f80000 [ 78.494408][ C0] unwind_next_frame+0x1509/0x20b0 [ 78.496639][ C0] ? __get_vm_area_node+0x1ca/0x330 [ 78.498863][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.501478][ C0] arch_stack_walk+0x94/0x100 [ 78.503493][ C0] ? __vmalloc_node_range_noprof+0x247/0x16b0 [ 78.506099][ C0] stack_trace_save+0x8e/0xc0 [ 78.508126][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 78.510422][ C0] ? __lock_acquire+0x436/0x2890 [ 78.512566][ C0] ? stack_trace_save+0x8e/0xc0 [ 78.514676][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 78.516973][ C0] save_stack+0x160/0x1f0 [ 78.518792][ C0] ? __pfx_save_stack+0x10/0x10 [ 78.520877][ C0] ? post_alloc_hook+0x1af/0x220 [ 78.522981][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 78.525360][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 78.527893][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 78.530049][ C0] ? alloc_pages_noprof+0x131/0x390 [ 78.532278][ C0] ? get_free_pages_noprof+0x10/0xb0 [ 78.534514][ C0] ? __kasan_populate_vmalloc+0xa0/0x220 [ 78.536889][ C0] ? alloc_vmap_area+0x98d/0x2a50 [ 78.538997][ C0] ? __get_vm_area_node+0x1ca/0x330 [ 78.541237][ C0] ? __lock_acquire+0x436/0x2890 [ 78.543300][ C0] __set_page_owner+0x91/0x560 [ 78.545302][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 78.547576][ C0] ? bad_range+0x261/0x4c0 [ 78.549469][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.551701][ C0] post_alloc_hook+0x1af/0x220 [ 78.553774][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 78.556109][ C0] ? __pfx___might_resched+0x10/0x10 [ 78.558366][ C0] ? should_fail_alloc_page+0xee/0x130 [ 78.560692][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 78.563200][ C0] ? find_held_lock+0x2b/0x80 [ 78.565239][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 78.567449][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 78.569491][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 78.572182][ C0] ? kernel_text_address+0x8d/0x100 [ 78.574389][ C0] ? __kernel_text_address+0xd/0x40 [ 78.576603][ C0] ? unwind_get_return_address+0x59/0xa0 [ 78.578976][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.581487][ C0] ? policy_nodemask+0xea/0x4e0 [ 78.583561][ C0] alloc_pages_mpol+0x1fb/0x550 [ 78.585659][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 78.587929][ C0] ? kasan_save_stack+0x42/0x60 [ 78.590016][ C0] ? kasan_save_track+0x14/0x30 [ 78.592111][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 78.594138][ C0] ? __get_vm_area_node+0x101/0x330 [ 78.596358][ C0] alloc_pages_noprof+0x131/0x390 [ 78.598502][ C0] get_free_pages_noprof+0x10/0xb0 [ 78.600683][ C0] __kasan_populate_vmalloc+0xa0/0x220 [ 78.602987][ C0] alloc_vmap_area+0x98d/0x2a50 [ 78.605081][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 78.607348][ C0] __get_vm_area_node+0x1ca/0x330 [ 78.609505][ C0] __vmalloc_node_range_noprof+0x247/0x16b0 [ 78.612026][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.614345][ C0] ? lock_acquire+0x179/0x330 [ 78.616372][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.618669][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 78.620720][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.623371][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 78.625431][ C0] ? __lock_acquire+0x436/0x2890 [ 78.627524][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 78.629695][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.631999][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 78.634185][ C0] ? xt_compat_init_offsets+0xe6/0x1f0 [ 78.636461][ C0] xt_compat_init_offsets+0xe6/0x1f0 [ 78.638669][ C0] ? __asan_memcpy+0x3c/0x60 [ 78.640646][ C0] compat_table_info+0xb7/0x5f0 [ 78.642733][ C0] ? xt_find_table_lock+0x144/0x520 [ 78.644852][ C0] compat_get_entries+0x211/0x860 [ 78.646986][ C0] ? find_held_lock+0x2b/0x80 [ 78.649002][ C0] ? __might_fault+0xe3/0x190 [ 78.650989][ C0] ? __might_fault+0xe3/0x190 [ 78.653008][ C0] ? __pfx_compat_get_entries+0x10/0x10 [ 78.655336][ C0] ? lock_acquire+0x179/0x330 [ 78.657378][ C0] ? __pfx___might_resched+0x10/0x10 [ 78.659622][ C0] ? bpf_lsm_capable+0x9/0x10 [ 78.661634][ C0] ? security_capable+0x7e/0x260 [ 78.663745][ C0] do_ip6t_get_ctl+0x51f/0xa50 [ 78.665792][ C0] ? __mutex_unlock_slowpath+0x161/0x790 [ 78.668181][ C0] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 78.670429][ C0] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 78.672996][ C0] nf_getsockopt+0x7c/0xe0 [ 78.674937][ C0] ipv6_getsockopt+0x1f7/0x280 [ 78.676987][ C0] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 78.679218][ C0] tcp_getsockopt+0xa1/0x100 [ 78.681224][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 78.683733][ C0] do_sock_getsockopt+0x324/0x410 [ 78.685884][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 78.688249][ C0] ? find_held_lock+0x2b/0x80 [ 78.690246][ C0] ? __might_fault+0xe3/0x190 [ 78.692286][ C0] __sys_getsockopt+0x123/0x1b0 [ 78.694370][ C0] __ia32_compat_sys_socketcall+0x4ba/0x780 [ 78.696888][ C0] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 78.699594][ C0] ? fput_close_sync+0x11d/0x260 [ 78.701756][ C0] __do_fast_syscall_32+0xe8/0x680 [ 78.703927][ C0] do_fast_syscall_32+0x32/0x80 [ 78.706007][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.708706][ C0] RIP: 0023:0xf7f97579 [ 78.710437][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.718479][ C0] RSP: 002b:00000000ffe7ead0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 78.722020][ C0] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffe7eb08 [ 78.725336][ C0] RDX: 00000000ffe7eb84 RSI: 00000000ffe7ebdc RDI: 00000000f7426ff4 [ 78.728688][ C0] RBP: 00000000f7428ba0 R08: 0000000000000000 R09: 0000000000000000 [ 78.732003][ C0] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 78.735317][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.738660][ C0] [ 78.740758][ C0] Kernel Offset: disabled [ 78.742597][ C0] Rebooting in 86400 seconds..