last executing test programs: 12.290172674s ago: executing program 1 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00') connect$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x32, 0xffffffffffffffff, 0x72a4c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 11.038952559s ago: executing program 3 (id=8): syz_emit_vhci(0x0, 0x7) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/95) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000002"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x68, 0x0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) unshare(0x10020000) close_range(0xffffffffffffffff, r1, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0x19, 0x20, 0xf3d, 0x112, 0x1716, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x0, 0x5, 0xb, 0x5b, 0x23, 0x0, [], [{{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x66, 0x8}}, {{0x9, 0x5, 0x88, 0x0, 0x60, 0x9, 0x1, 0xc}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xcb, 0x9c, 0x6}}]}}]}}]}}, 0x0) 9.086258324s ago: executing program 1 (id=10): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x5c, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x10, 0x4, 0x0, 0x24, 0x6, 0x65, 0x4c0, 0x31, 0xff, 0x9, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x4, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x9}, {@remote, 0x12000000}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}]}]}}}}}}}, 0x0) 8.972178152s ago: executing program 3 (id=11): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, 0xffffffffffffffff) readv(r1, &(0x7f0000001980)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f0000000700)=""/30, 0x1e}, {&(0x7f0000001780)=""/98, 0x62}, {&(0x7f0000001800)=""/84, 0x54}, {&(0x7f0000001880)=""/243, 0xf3}], 0x7) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 8.214795952s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00') io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 8.2133069s ago: executing program 1 (id=13): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000180)={0x8, 0x0, [{0x80000007, 0x5, 0x1, 0x80, 0x0, 0x7fff, 0x200}, {0xd, 0xfa9, 0x0, 0xffff, 0x4, 0xd57, 0xffffffff}, {0xc0000000, 0x2, 0x3, 0xe7, 0x6, 0x3, 0x2}, {0x80000007, 0x4, 0x4, 0x8001, 0x0, 0x0, 0x1}, {0x1, 0x8, 0x6, 0x8000, 0x8ee, 0xd, 0x6}, {0x80000001, 0x4, 0x1, 0x7, 0x2, 0xc, 0x1}, {0x80000000, 0x3, 0x2, 0x1ff, 0x7, 0x5, 0xfffffffd}, {0x40000002, 0xff, 0x4, 0xab, 0x1ff, 0x7ff, 0x2}]}) 8.160047383s ago: executing program 3 (id=14): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x5, 0xf, 0x5, 0x3ff, 0x7, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f0000000200)='./bus\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sctp\x00') fchdir(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x4) getdents(r3, 0xfffffffffffffffd, 0xbb) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xff, &(0x7f0000006680)) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 8.159473203s ago: executing program 2 (id=3): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = memfd_create(0x0, 0x2) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, &(0x7f0000000040)="1f"}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r9, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf510}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x6b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x1, 0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f00000001c0)='GPL\x00', 0x5, 0xda, &(0x7f0000000400)=""/218, 0x41000, 0x6, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r5, r9, r9, r9, r9, r9, r10, 0x1], &(0x7f0000000700)=[{0x0, 0x5, 0xe, 0xa}, {0x0, 0x1, 0xf}, {0x0, 0x1, 0xe, 0x1}, {0x3, 0x1, 0x4, 0x5}, {0x5, 0x5, 0x7, 0x7}], 0x10, 0x8001}, 0x94) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r11 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4088844) sendmsg$netlink(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20000041) 8.126652689s ago: executing program 4 (id=5): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="2a9b826ec5354e5bb66613b291ea329eb73756c68fb1a2531438bec34fd2fe54392418a4a70f6f14a80ac43f99a671126a43182472a8d72b21a9bf74aa1cab7e50b3dc93547f4a3123ebe1603f75544065223d878d4395ae11996e23c5524c38c32e1fff4df22d6832b9e4c936f988ffb4987661ba2e18730722aa83481dcbede3e026c59de3b365e8b06435034d5c8f36178d4676b7b2428ed0a8334a33f8f28afe50e2808d72b26f5be6fac050d2"}, {&(0x7f0000000240)="e0654ca02402fd6f2456e673aba5f26c8ea14aaf07723d08a3735b03822641bbbdca73499b365825fa5c9a7d141a96706da35b984fd32b9689f058340dae03867cf44721424e9e60da70d88efc6e42aa9399d597d448dbe679c0b1336e"}], 0x10a9, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$isdn(0x22, 0x3, 0x10) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 7.679118441s ago: executing program 1 (id=15): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000057c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x20000000) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/126, 0x7e}], 0x2, &(0x7f0000000500)=""/252, 0xfc}, 0x24) 7.599157945s ago: executing program 3 (id=16): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r0, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0) 6.959814513s ago: executing program 0 (id=17): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000000040)=[r9, r9], 0x2, r7, r8, 0x1, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000020000000000caa000000090000000000000004b427180010"}}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r11 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000340)={0x2000, r11}, 0x0) 5.570034668s ago: executing program 3 (id=18): mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000080)=0x4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x4c, 0x2000, @fd_index=0x2, 0x5, &(0x7f0000000100)=""/41, 0x29, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000050c0), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000001c0)={0xd21, 0x0, [{0xc0000001, 0xc, 0x0, 0x1, 0x3}, {0x80000019, 0x6, 0x0, 0x8}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="03000004", @ANYRES16=r4, @ANYRESOCT, @ANYRES32=r8, @ANYBLOB="04006e80"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693c1e10cd060202043e010203010902240001000000000904230002722f680009057a43ff034609050905", @ANYRES32], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f0000000040)={0x0, 0x3}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.56769042s ago: executing program 1 (id=19): syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/95) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000002"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x68, 0x0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) unshare(0x10020000) close_range(0xffffffffffffffff, r1, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0x19, 0x20, 0xf3d, 0x112, 0x1716, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x0, 0x5, 0xb, 0x5b, 0x23, 0x0, [], [{{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x66, 0x8}}, {{0x9, 0x5, 0x88, 0x0, 0x60, 0x9, 0x1, 0xc}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xcb, 0x9c, 0x6}}]}}]}}]}}, 0x0) 4.569767145s ago: executing program 2 (id=20): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) sched_setaffinity(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) syz_emit_ethernet(0x45, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}, "e9c9cee4837ae0"}}}}}, 0x0) 4.540400532s ago: executing program 0 (id=21): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x5c, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x10, 0x4, 0x0, 0x24, 0x6, 0x65, 0x4c0, 0x31, 0xff, 0x9, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x4, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x9}, {@remote, 0x12000000}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}]}]}}}}}}}, 0x0) 4.224326722s ago: executing program 0 (id=22): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, 0xffffffffffffffff) readv(r1, &(0x7f0000001980)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f0000000700)=""/30, 0x1e}, {&(0x7f0000001780)=""/98, 0x62}, {&(0x7f0000001800)=""/84, 0x54}, {&(0x7f0000001880)=""/243, 0xf3}], 0x7) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 3.629260979s ago: executing program 2 (id=23): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) fcntl$setown(r3, 0x8, r0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000400)={0x3, r1, 'id1\x00'}) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r2, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x9}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)="dc", 0x1) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000001240)={0xa, 0x4e2c, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x17}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="fd613257831ddb4b1ef935cef73e95eb50f6bbf5cfabb38a20d748be7b14e270ed6e85623a5d380420", 0x29}], 0x1, &(0x7f0000001c00)=[@dstopts={{0x80, 0x29, 0x37, {0x32, 0xc, '\x00', [@generic={0x0, 0x33, "33ffa68acba78c7cb1de3957b620166708abce7c9512fdb193647b5db470b27f93a70902f9f8e0ce9818a0e20a3bfeb0729f91"}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x10, {0x3, 0x2, 0x65, 0x5, [0x6]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @hoplimit_2292={{0x0, 0x29, 0x8, 0x167}}, @rthdrdstopts={{0x1028, 0x29, 0x37, {0x6, 0x201, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x8, 0x1000, "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"}]}}}], 0x10d8}}], 0x2, 0x40811) shutdown(r8, 0x1) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x7fffffffffffffff, 0x2ac, 0x0, 0x0, 0xd, 0x18, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000ff0100", [0xc, 0x2000000]}) 3.37617613s ago: executing program 4 (id=24): pipe(&(0x7f00000002c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc3000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffc0, '\x00', 0x0, 0x0}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) userfaultfd(0x801) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0x0}}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe, 0x2) read(r6, &(0x7f0000000200)=""/19, 0xffffff42) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d0015000300000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d02802b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de60dd6e4edef3d93452a92307f00000e97030000000000000000000000007200"/216, 0xd8}], 0x1}, 0x40810) 3.204388867s ago: executing program 0 (id=25): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = accept$netrom(r1, &(0x7f0000000340)={{0x3, @rose}, [@netrom, @remote, @remote, @netrom, @null, @remote, @remote, @rose]}, &(0x7f0000000000)=0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002280)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002380)={0x50, 0x0, r4, {0x7, 0x9, 0x1f4, 0x61822212, 0x0, 0x1, 0x0, 0x3}}, 0x50) read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc4}) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000280)) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000100)=""/215, 0xd7, 0x0, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40}, 0x2}}, 0x80) 1.574735413s ago: executing program 4 (id=26): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x2eff, 0x4, 0xd19b, 0xfffff044, 0x2, 0x9, 0x3, 0x3, 0xffe, 0xa, 0xc, 0x1001, 0x7f, 0x3, 0xffd, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x9, 0x2, 0x800, 0xe2df, 0x2, 0x80d, 0x5, 0x9, 0x6, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x640, 0xe, 0x50323234, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x3}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x980000, 0x8, 0x2, r5, 0x0, &(0x7f0000000080)={0x980901, 0x4, '\x00', @value64=0x9}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1090a4, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f0000000100)={0x10003, 0x0, &(0x7f0000510000/0x4000)=nil}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, r8, 0x2) 1.336746053s ago: executing program 1 (id=27): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x2eff, 0x4, 0xd19b, 0xfffff044, 0x2, 0x9, 0x3, 0x3, 0xffe, 0xa, 0xc, 0x1001, 0x7f, 0x3, 0xffd, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x9, 0x2, 0x800, 0xe2df, 0x2, 0x80d, 0x5, 0x9, 0x6, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x640, 0xe, 0x50323234, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x3}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x980000, 0x8, 0x2, r5, 0x0, &(0x7f0000000080)={0x980901, 0x4, '\x00', @value64=0x9}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1090a4, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f0000000100)={0x10003, 0x0, &(0x7f0000510000/0x4000)=nil}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, r8, 0x2) 252.957246ms ago: executing program 3 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) sched_setaffinity(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) 72.400278ms ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000300)="c8320fa0c6ad594214e4f6fdc5615bc4fbfd6f99c62b96ecd91e473ac91f790fec1bcf08766ae5a3dbed02ff1c02f3bcddffd854fa441d0014729ca50d60a7987e57b734edcf0a4800badf117646ff58cbcea8462e1adcad1dc0c4e937d27fdadaa9c8d5200f297bc3a107e98eebee65a6125cb6c0e339666d810d19bd30ff7ee9900db5769befa4d342087081fceb2d47dab92547dfcc0bf316271f66b1d09016848cda59bb49da13430882560b401a86ee55ba15fb54525cbdc55ae9085f9dffc2bc2736df9dd88271408d2952d2201d9e898d99aafd86e62e508f9c80f9b2a13630f6a35f654ab1e208e3667937bf2559addd2184", &(0x7f0000000500)=""/133, &(0x7f00000005c0)="0bbe6e478e8534fa035a6a5f635db14e0fa8f2acfa9613921fe9d645dc6aa04cb5a9cbf590c85110370c34edf2344743e009d836845a9cb0289b491c3ec3b2f614b5167568db2d21e5d457f8fdb18c3df6889404b3eb25164c5451292e15ed0d0c9f6c6e602d620793841654d1d710fc3711c552b031f7f37373ace5b958fb462e2b43a64f60da97b9b5bd009320", &(0x7f0000000680)="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", 0x7, 0xffffffffffffffff, 0x4}, 0x38) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="240e857fe863733040cdb8c36226e744f4ec12b1353d1366484c6df4944148348ebf273355bd81a528f0da9ce5c4ad2215bf74c5", 0x34}], 0x1) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 0s ago: executing program 2 (id=30): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00') io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 71.249207][ T5793] cgroup: Unknown subsys name 'net' [ 71.489553][ T5793] cgroup: Unknown subsys name 'cpuset' [ 71.545398][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.244428][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.658082][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.659889][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.660856][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.662597][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.664358][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.665615][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.666674][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.667249][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.667895][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.670792][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.674185][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.675473][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.676575][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.677369][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.681404][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.681679][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.682472][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.712394][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.713196][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.722380][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.727512][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.738541][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.747897][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.751732][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.758974][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.703091][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 76.748929][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 76.753620][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 76.762887][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 77.151807][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 77.626118][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.627219][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.627594][ T5803] bridge_slave_0: entered allmulticast mode [ 77.629133][ T5803] bridge_slave_0: entered promiscuous mode [ 77.736223][ T5820] Bluetooth: hci3: command tx timeout [ 77.816261][ T5820] Bluetooth: hci1: command tx timeout [ 77.816353][ T5820] Bluetooth: hci4: command tx timeout [ 77.816427][ T5820] Bluetooth: hci2: command tx timeout [ 77.816498][ T5820] Bluetooth: hci0: command tx timeout [ 77.838682][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.838880][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.839070][ T5803] bridge_slave_1: entered allmulticast mode [ 77.841543][ T5803] bridge_slave_1: entered promiscuous mode [ 77.865095][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.865212][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.865678][ T5807] bridge_slave_0: entered allmulticast mode [ 77.868126][ T5807] bridge_slave_0: entered promiscuous mode [ 77.870144][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.870256][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.870680][ T5804] bridge_slave_0: entered allmulticast mode [ 77.874028][ T5804] bridge_slave_0: entered promiscuous mode [ 77.878393][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.878508][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.878676][ T5805] bridge_slave_0: entered allmulticast mode [ 77.882312][ T5805] bridge_slave_0: entered promiscuous mode [ 77.961265][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.961374][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.961482][ T5807] bridge_slave_1: entered allmulticast mode [ 77.962838][ T5807] bridge_slave_1: entered promiscuous mode [ 77.974813][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.974903][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.975042][ T5804] bridge_slave_1: entered allmulticast mode [ 77.976594][ T5804] bridge_slave_1: entered promiscuous mode [ 78.028633][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028758][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.028936][ T5805] bridge_slave_1: entered allmulticast mode [ 78.031536][ T5805] bridge_slave_1: entered promiscuous mode [ 78.339813][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.598104][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.598337][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.598472][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.598574][ T5808] bridge_slave_0: entered allmulticast mode [ 78.599911][ T5808] bridge_slave_0: entered promiscuous mode [ 78.606109][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.630168][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.637317][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.736034][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.736155][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.736324][ T5808] bridge_slave_1: entered allmulticast mode [ 78.738009][ T5808] bridge_slave_1: entered promiscuous mode [ 78.741995][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.743936][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.748570][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.447334][ T5803] team0: Port device team_slave_0 added [ 79.688072][ T5803] team0: Port device team_slave_1 added [ 79.690782][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.692763][ T5807] team0: Port device team_slave_0 added [ 79.695129][ T5804] team0: Port device team_slave_0 added [ 79.697755][ T5805] team0: Port device team_slave_0 added [ 79.787610][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.789229][ T5807] team0: Port device team_slave_1 added [ 79.791576][ T5804] team0: Port device team_slave_1 added [ 79.794028][ T5805] team0: Port device team_slave_1 added [ 79.817123][ T5820] Bluetooth: hci3: command tx timeout [ 79.895384][ T5820] Bluetooth: hci1: command tx timeout [ 79.895403][ T5819] Bluetooth: hci2: command tx timeout [ 79.895429][ T5819] Bluetooth: hci4: command tx timeout [ 79.895446][ T5819] Bluetooth: hci0: command tx timeout [ 80.366937][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.366949][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.366963][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.687298][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.687314][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.687330][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.689481][ T5808] team0: Port device team_slave_0 added [ 80.690380][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.690393][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.690416][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.691778][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.691790][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.691814][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.705440][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.705454][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.705476][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.711062][ T5808] team0: Port device team_slave_1 added [ 80.711800][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.711812][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.711837][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.713319][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.713331][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.713355][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.719505][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.719520][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.719543][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.038613][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.038625][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.038638][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.108379][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.108390][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.108404][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.192389][ T5803] hsr_slave_0: entered promiscuous mode [ 81.193379][ T5803] hsr_slave_1: entered promiscuous mode [ 81.591566][ T5807] hsr_slave_0: entered promiscuous mode [ 81.592640][ T5807] hsr_slave_1: entered promiscuous mode [ 81.596581][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 81.596701][ T5807] Cannot create hsr debugfs directory [ 81.608191][ T5805] hsr_slave_0: entered promiscuous mode [ 81.609446][ T5805] hsr_slave_1: entered promiscuous mode [ 81.610327][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 81.610347][ T5805] Cannot create hsr debugfs directory [ 81.621050][ T5804] hsr_slave_0: entered promiscuous mode [ 81.622342][ T5804] hsr_slave_1: entered promiscuous mode [ 81.623198][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 81.623219][ T5804] Cannot create hsr debugfs directory [ 81.658984][ T805] cfg80211: failed to load regulatory.db [ 81.894979][ T5820] Bluetooth: hci3: command tx timeout [ 81.975020][ T5816] Bluetooth: hci1: command tx timeout [ 81.975102][ T5819] Bluetooth: hci2: command tx timeout [ 81.975146][ T5820] Bluetooth: hci0: command tx timeout [ 81.975215][ T5822] Bluetooth: hci4: command tx timeout [ 82.200192][ T5808] hsr_slave_0: entered promiscuous mode [ 82.200983][ T5808] hsr_slave_1: entered promiscuous mode [ 82.201516][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 82.201535][ T5808] Cannot create hsr debugfs directory [ 83.533652][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.594089][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.629002][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.680888][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.793197][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.831968][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.873554][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.922864][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.977787][ T5822] Bluetooth: hci3: command tx timeout [ 84.032425][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.053010][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.056173][ T5822] Bluetooth: hci4: command tx timeout [ 84.056201][ T5822] Bluetooth: hci2: command tx timeout [ 84.056221][ T5822] Bluetooth: hci1: command tx timeout [ 84.056274][ T5820] Bluetooth: hci0: command tx timeout [ 84.094257][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.144634][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.273520][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.309114][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.341741][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.374157][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.490294][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.536225][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.580414][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.623088][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.667927][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.726323][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.746928][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.774273][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.782859][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.819742][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.820030][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.868607][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.906119][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.906242][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.910882][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.958459][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.958627][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.027186][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.038134][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.059929][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.060149][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.106323][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.106449][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.166240][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.224650][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.233304][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.233833][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.270013][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.270216][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.428279][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.473401][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.473603][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.541117][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.541376][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.571053][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.768070][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.892856][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.955855][ T5803] veth0_vlan: entered promiscuous mode [ 86.002105][ T5803] veth1_vlan: entered promiscuous mode [ 86.157219][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.199625][ T5805] veth0_vlan: entered promiscuous mode [ 86.239131][ T5803] veth0_macvtap: entered promiscuous mode [ 86.252724][ T5805] veth1_vlan: entered promiscuous mode [ 86.269710][ T5803] veth1_macvtap: entered promiscuous mode [ 86.347339][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.367548][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.393293][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.406980][ T5804] veth0_vlan: entered promiscuous mode [ 86.437779][ T5805] veth0_macvtap: entered promiscuous mode [ 86.438905][ T3972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.444068][ T3972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.451349][ T3972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.486101][ T3972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.487318][ T5805] veth1_macvtap: entered promiscuous mode [ 86.510456][ T5804] veth1_vlan: entered promiscuous mode [ 86.627943][ T5807] veth0_vlan: entered promiscuous mode [ 86.651807][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.728767][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.733431][ T5807] veth1_vlan: entered promiscuous mode [ 86.736847][ T5808] veth0_vlan: entered promiscuous mode [ 86.787876][ T1015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.807262][ T1015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.813050][ T1015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.842290][ T5808] veth1_vlan: entered promiscuous mode [ 86.844085][ T1015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863440][ T5804] veth0_macvtap: entered promiscuous mode [ 86.876006][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.876030][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.933739][ T5804] veth1_macvtap: entered promiscuous mode [ 87.103349][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.103368][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.127198][ T5807] veth0_macvtap: entered promiscuous mode [ 87.159958][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.192714][ T5807] veth1_macvtap: entered promiscuous mode [ 87.208333][ T2139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.208352][ T2139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.221694][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.234277][ T5808] veth0_macvtap: entered promiscuous mode [ 87.253871][ T5808] veth1_macvtap: entered promiscuous mode [ 87.259032][ T3568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.268949][ T3568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.276761][ T3568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.296922][ T3568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.341191][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.401664][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.401679][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.423869][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.457456][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.357039][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.409588][ T3972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.429096][ T3972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.469137][ T3972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.486851][ T3972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.487811][ T2139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.488243][ T3972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.489554][ T3972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542257][ T3972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.566669][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.566688][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.775226][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.827622][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.827642][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.910274][ T1495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.910294][ T1495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.915276][ T5894] usb 2-1: device descriptor read/64, error -71 [ 89.987305][ T1495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.987320][ T1495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.009973][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.154901][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 90.182825][ T5923] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 90.182853][ T5923] usb 4-1: config 0 has no interface number 0 [ 90.182928][ T5923] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 90.182954][ T5923] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x88 has invalid maxpacket 96, setting to 64 [ 90.182979][ T5923] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 90.234582][ T5923] usb 4-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice=17.16 [ 90.234609][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.234628][ T5923] usb 4-1: Product: syz [ 90.234641][ T5923] usb 4-1: Manufacturer: syz [ 90.234655][ T5923] usb 4-1: SerialNumber: syz [ 90.279275][ T5923] usb 4-1: config 0 descriptor?? [ 90.291791][ T5939] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.299222][ T5894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.351926][ T5923] sierra 4-1:0.49: Sierra USB modem converter detected [ 90.353848][ T1495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.353866][ T1495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.103591][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.103612][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.105550][ T5894] usb 2-1: device descriptor read/64, error -71 [ 91.240341][ T5894] usb usb2-port1: attempt power cycle [ 91.652207][ T5923] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 91.660512][ T5923] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 91.685499][ T5923] usb 4-1: USB disconnect, device number 2 [ 91.983808][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 91.983855][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.983881][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.983895][ T5820] Workqueue: hci1 hci_rx_work [ 91.983934][ T5820] Call Trace: [ 91.983945][ T5820] [ 91.983954][ T5820] dump_stack_lvl+0xe8/0x150 [ 91.983991][ T5820] sysfs_create_dir_ns+0x259/0x280 [ 91.984018][ T5820] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 91.984046][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 91.984076][ T5820] ? rt_spin_unlock+0x161/0x200 [ 91.984102][ T5820] kobject_add_internal+0x6b1/0xcd0 [ 91.984132][ T5820] kobject_add+0x155/0x220 [ 91.984158][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 91.984184][ T5820] ? get_device_parent+0x370/0x3a0 [ 91.984221][ T5820] device_add+0x408/0xb80 [ 91.984253][ T5820] hci_conn_add_sysfs+0xd5/0x210 [ 91.984286][ T5820] le_conn_complete_evt+0xf1d/0x1420 [ 91.984318][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 91.984341][ T5820] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 91.984361][ T5820] ? lockdep_hardirqs_on+0x7b/0x110 [ 91.984380][ T5820] ? skb_pull_data+0xfb/0x200 [ 91.984409][ T5820] hci_le_conn_complete_evt+0x187/0x480 [ 91.984437][ T5820] hci_event_packet+0x78f/0x1260 [ 91.984468][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 91.984491][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 91.984518][ T5820] ? rt_spin_unlock+0x150/0x200 [ 91.984551][ T5820] ? hci_send_to_monitor+0xe2/0x590 [ 91.984578][ T5820] hci_rx_work+0x3ee/0x1060 [ 91.984604][ T5820] ? process_scheduled_works+0x9ef/0x1770 [ 91.984627][ T5820] process_scheduled_works+0xad1/0x1770 [ 91.984677][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.984696][ T5820] ? do_raw_spin_lock+0x121/0x290 [ 91.984729][ T5820] worker_thread+0x8a0/0xda0 [ 91.984761][ T5820] ? __kthread_parkme+0x7b/0x200 [ 91.984791][ T5820] kthread+0x711/0x8a0 [ 91.984817][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 91.984837][ T5820] ? __pfx_kthread+0x10/0x10 [ 91.984857][ T5820] ? rt_spin_unlock+0x150/0x200 [ 91.984884][ T5820] ? rt_spin_unlock+0x161/0x200 [ 91.984906][ T5820] ? __pfx_kthread+0x10/0x10 [ 91.984932][ T5820] ret_from_fork+0x510/0xa50 [ 91.984957][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 91.984975][ T5820] ? __switch_to+0xc9e/0x1480 [ 91.985005][ T5820] ? __pfx_kthread+0x10/0x10 [ 91.985031][ T5820] ret_from_fork_asm+0x1a/0x30 [ 91.985075][ T5820] [ 91.986733][ T5820] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.986772][ T5820] Bluetooth: hci1: failed to register connection device [ 92.610180][ T5923] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 92.629263][ T5923] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 92.636355][ T5923] sierra 4-1:0.49: device disconnected [ 96.286647][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.499211][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.600592][ T5819] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 96.600616][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.600639][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.600652][ T5819] Workqueue: hci4 hci_rx_work [ 96.600674][ T5819] Call Trace: [ 96.600682][ T5819] [ 96.600691][ T5819] dump_stack_lvl+0xe8/0x150 [ 96.600720][ T5819] sysfs_create_dir_ns+0x259/0x280 [ 96.600759][ T5819] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 96.600787][ T5819] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.600817][ T5819] ? rt_spin_unlock+0x161/0x200 [ 96.600843][ T5819] kobject_add_internal+0x6b1/0xcd0 [ 96.600873][ T5819] kobject_add+0x155/0x220 [ 96.600898][ T5819] ? __pfx_kobject_add+0x10/0x10 [ 96.600924][ T5819] ? get_device_parent+0x370/0x3a0 [ 96.600948][ T5819] device_add+0x408/0xb80 [ 96.600972][ T5819] hci_conn_add_sysfs+0xd5/0x210 [ 96.601004][ T5819] le_conn_complete_evt+0xf1d/0x1420 [ 96.601037][ T5819] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.601059][ T5819] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 96.601079][ T5819] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.601100][ T5819] ? skb_pull_data+0xfb/0x200 [ 96.601132][ T5819] hci_le_conn_complete_evt+0x187/0x480 [ 96.601164][ T5819] hci_event_packet+0x78f/0x1260 [ 96.601194][ T5819] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.601216][ T5819] ? __pfx_hci_event_packet+0x10/0x10 [ 96.601249][ T5819] ? rt_spin_unlock+0x150/0x200 [ 96.601284][ T5819] ? hci_send_to_monitor+0xe2/0x590 [ 96.601311][ T5819] hci_rx_work+0x3ee/0x1060 [ 96.601337][ T5819] ? process_scheduled_works+0x9ef/0x1770 [ 96.601361][ T5819] process_scheduled_works+0xad1/0x1770 [ 96.601410][ T5819] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.601428][ T5819] ? do_raw_spin_lock+0x121/0x290 [ 96.601463][ T5819] worker_thread+0x8a0/0xda0 [ 96.601509][ T5819] kthread+0x711/0x8a0 [ 96.601537][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 96.601558][ T5819] ? __pfx_kthread+0x10/0x10 [ 96.601580][ T5819] ? rt_spin_unlock+0x150/0x200 [ 96.601608][ T5819] ? rt_spin_unlock+0x161/0x200 [ 96.601628][ T5819] ? __pfx_kthread+0x10/0x10 [ 96.601653][ T5819] ret_from_fork+0x510/0xa50 [ 96.601676][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 96.601694][ T5819] ? __switch_to+0xc9e/0x1480 [ 96.601725][ T5819] ? __pfx_kthread+0x10/0x10 [ 96.601759][ T5819] ret_from_fork_asm+0x1a/0x30 [ 96.601808][ T5819] [ 96.609778][ T5819] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.609820][ T5819] Bluetooth: hci4: failed to register connection device [ 97.030657][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 97.035753][ T5923] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 97.035779][ T5923] usb 2-1: config 0 has no interface number 0 [ 97.035823][ T5923] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 97.035851][ T5923] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x88 has invalid maxpacket 96, setting to 64 [ 97.035875][ T5923] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 97.046901][ T5923] usb 2-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice=17.16 [ 97.046927][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.046945][ T5923] usb 2-1: Product: syz [ 97.046959][ T5923] usb 2-1: Manufacturer: syz [ 97.046972][ T5923] usb 2-1: SerialNumber: syz [ 97.065069][ T5923] usb 2-1: config 0 descriptor?? [ 97.085190][ T5991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.136120][ T5923] sierra 2-1:0.49: Sierra USB modem converter detected [ 97.704862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.806194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.906677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.906720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.906843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.907074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.907970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.910287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.914371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.914412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.872057][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 98.879255][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.066156][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 99.148586][ T6011] Bluetooth: MGMT ver 1.23 [ 99.148629][ T6011] Bluetooth: hci0: unsupported parameter 28683 [ 99.148646][ T6011] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 99.182206][ T5902] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 99.182251][ T5902] usb 4-1: can't read configurations, error -71 [ 99.183680][ T6011] loop6: detected capacity change from 0 to 524288000 [ 99.313901][ T5923] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 99.328897][ T5923] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 99.578005][ T31] kernel read not supported for file /dsp (pid: 31 comm: kworker/1:0) [ 100.394980][ T5923] usb 2-1: USB disconnect, device number 5 [ 100.466388][ T5923] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 100.496944][ T6021] loop6: detected capacity change from 524288000 to 0 [ 100.497450][ C0] invalid error, dev loop6, sector 120 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 100.563286][ T5923] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 100.625253][ T5923] sierra 2-1:0.49: device disconnected [ 101.171508][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 101.171533][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.171556][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.171569][ T5820] Workqueue: hci2 hci_rx_work [ 101.171590][ T5820] Call Trace: [ 101.171599][ T5820] [ 101.171607][ T5820] dump_stack_lvl+0xe8/0x150 [ 101.171639][ T5820] sysfs_create_dir_ns+0x259/0x280 [ 101.171669][ T5820] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 101.171693][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 101.171721][ T5820] ? rt_spin_unlock+0x161/0x200 [ 101.171748][ T5820] kobject_add_internal+0x6b1/0xcd0 [ 101.171778][ T5820] kobject_add+0x155/0x220 [ 101.171803][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 101.171830][ T5820] ? get_device_parent+0x370/0x3a0 [ 101.171857][ T5820] device_add+0x408/0xb80 [ 101.171880][ T5820] hci_conn_add_sysfs+0xd5/0x210 [ 101.171909][ T5820] le_conn_complete_evt+0xf1d/0x1420 [ 101.171930][ T5820] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.171957][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 101.171995][ T5820] hci_le_conn_complete_evt+0x187/0x480 [ 101.172025][ T5820] hci_event_packet+0x78f/0x1260 [ 101.172057][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 101.172082][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 1[ 101.172116][ T5820] ? preempt_schedule_common+0x83/0xd0 [ 101.172145][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.172167][ T5820] ? hci_send_to_monitor+0xe2/0x590 [ 101.172194][ T5820] hci_rx_work+0x3ee/0x1060 [ 101.172215][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.172237][ T5820] ? process_scheduled_works+0x9ef/0x1770 [ 101.172258][ T5820] process_scheduled_works+0xad1/0x1770 [ 101.172305][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.172322][ T5820] ? do_raw_spin_lock+0x121/0x290 [ 101.172357][ T5820] worker_thread+0x8a0/0xda0 [ 101.172387][ T5820] ? __kthread_parkme+0x7b/0x200 [ 101.172409][ T5820] kthread+0x711/0x8a0 [ 101.172424][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 101.172436][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.172449][ T5820] ? rt_spin_unlock+0x150/0x200 [ 101.172465][ T5820] ? rt_spin_unlock+0x161/0x200 [ 101.172477][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.172491][ T5820] ret_from_fork+0x510/0xa50 [ 101.172504][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 101.172514][ T5820] ? __switch_to+0xc9e/0x1480 [ 101.172531][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.172545][ T5820] ret_from_fork_asm+0x1a/0x30 [ 101.172568][ T5820] [ 101.172621][ T5820] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.172836][ T5820] Bluetooth: hci2: failed to register connection device [ 101.580844][ T5820] ================================================================== [ 101.580864][ T5820] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.580903][ T5820] Read of size 8 at addr ffff88801e6c17b0 by task kworker/u9:5/5820 [ 101.580921][ T5820] [ 101.580932][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.580955][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.580969][ T5820] Workqueue: hci2 hci_rx_work [ 101.580996][ T5820] Call Trace: [ 101.581004][ T5820] [ 101.581013][ T5820] dump_stack_lvl+0xe8/0x150 [ 101.581041][ T5820] print_report+0xca/0x240 [ 101.581065][ T5820] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.581092][ T5820] kasan_report+0x118/0x150 [ 101.581112][ T5820] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.581146][ T5820] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.581175][ T5820] l2cap_connect_cfm+0x367/0x10e0 [ 101.581206][ T5820] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 101.581230][ T5820] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 101.581251][ T5820] ? mutex_lock_nested+0x154/0x1d0 [ 101.581274][ T5820] ? hci_connect_cfm+0x2c/0x140 [ 101.581294][ T5820] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 101.581319][ T5820] hci_connect_cfm+0x95/0x140 [ 101.581341][ T5820] le_conn_complete_evt+0xf65/0x1420 [ 101.581363][ T5820] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.581386][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 101.581417][ T5820] hci_le_conn_complete_evt+0x187/0x480 [ 101.581444][ T5820] hci_event_packet+0x78f/0x1260 [ 101.581473][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 101.581495][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 101.581523][ T5820] ? preempt_schedule_common+0x83/0xd0 [ 101.581551][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.581574][ T5820] ? hci_send_to_monitor+0xe2/0x590 [ 101.581599][ T5820] hci_rx_work+0x3ee/0x1060 [ 101.581618][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.581639][ T5820] ? process_scheduled_works+0x9ef/0x1770 [ 101.581662][ T5820] process_scheduled_works+0xad1/0x1770 [ 101.581700][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.581720][ T5820] ? do_raw_spin_lock+0x121/0x290 [ 101.581751][ T5820] worker_thread+0x8a0/0xda0 [ 101.581780][ T5820] ? __kthread_parkme+0x7b/0x200 [ 101.581808][ T5820] kthread+0x711/0x8a0 [ 101.581835][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 101.581856][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.581879][ T5820] ? rt_spin_unlock+0x150/0x200 [ 101.581905][ T5820] ? rt_spin_unlock+0x161/0x200 [ 101.581927][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.581953][ T5820] ret_from_fork+0x510/0xa50 [ 101.581975][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 101.582000][ T5820] ? __switch_to+0xc9e/0x1480 [ 101.582029][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.582055][ T5820] ret_from_fork_asm+0x1a/0x30 [ 101.582092][ T5820] [ 101.582099][ T5820] [ 101.582104][ T5820] Allocated by task 5820: [ 101.582113][ T5820] kasan_save_track+0x3e/0x80 [ 101.582136][ T5820] __kasan_kmalloc+0x93/0xb0 [ 101.582160][ T5820] __kmalloc_noprof+0x23e/0x7e0 [ 101.582183][ T5820] sk_prot_alloc+0xe7/0x220 [ 101.582203][ T5820] sk_alloc+0x3a/0x390 [ 101.582221][ T5820] bt_sock_alloc+0x3b/0x310 [ 101.582237][ T5820] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 101.582262][ T5820] l2cap_connect_cfm+0x367/0x10e0 [ 101.582284][ T5820] hci_connect_cfm+0x95/0x140 [ 101.582302][ T5820] le_conn_complete_evt+0xf65/0x1420 [ 101.582322][ T5820] hci_le_conn_complete_evt+0x187/0x480 [ 101.582342][ T5820] hci_event_packet+0x78f/0x1260 [ 101.582366][ T5820] hci_rx_work+0x3ee/0x1060 [ 101.582381][ T5820] process_scheduled_works+0xad1/0x1770 [ 101.582399][ T5820] worker_thread+0x8a0/0xda0 [ 101.582418][ T5820] kthread+0x711/0x8a0 [ 101.582439][ T5820] ret_from_fork+0x510/0xa50 [ 101.582455][ T5820] ret_from_fork_asm+0x1a/0x30 [ 101.582479][ T5820] [ 101.582484][ T5820] Freed by task 6029: [ 101.582492][ T5820] kasan_save_track+0x3e/0x80 [ 101.582514][ T5820] kasan_save_free_info+0x46/0x50 [ 101.582533][ T5820] __kasan_slab_free+0x5c/0x80 [ 101.582556][ T5820] kfree+0x1bd/0x900 [ 101.582576][ T5820] __sk_destruct+0x626/0x880 [ 101.582595][ T5820] l2cap_sock_cleanup_listen+0xe0/0x450 [ 101.582619][ T5820] l2cap_sock_release+0x6e/0x270 [ 101.582640][ T5820] sock_close+0xc3/0x240 [ 101.582662][ T5820] __fput+0x45b/0xa80 [ 101.582680][ T5820] task_work_run+0x1d4/0x260 [ 101.582703][ T5820] get_signal+0x11c4/0x1310 [ 101.582720][ T5820] arch_do_signal_or_restart+0x9a/0x7a0 [ 101.582745][ T5820] exit_to_user_mode_loop+0x87/0x4e0 [ 101.582767][ T5820] do_syscall_64+0x2b7/0xf80 [ 101.582783][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.582800][ T5820] [ 101.582805][ T5820] The buggy address belongs to the object at ffff88801e6c1000 [ 101.582805][ T5820] which belongs to the cache kmalloc-2k of size 2048 [ 101.582821][ T5820] The buggy address is located 1968 bytes inside of [ 101.582821][ T5820] freed 2048-byte region [ffff88801e6c1000, ffff88801e6c1800) [ 101.582841][ T5820] [ 101.582846][ T5820] The buggy address belongs to the physical page: [ 101.582866][ T5820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e6c0 [ 101.582885][ T5820] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.582902][ T5820] flags: 0x80000000000040(head|node=0|zone=1) [ 101.582923][ T5820] page_type: f5(slab) [ 101.582946][ T5820] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 101.582963][ T5820] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 101.582986][ T5820] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 101.583003][ T5820] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 101.583021][ T5820] head: 0080000000000003 ffffea000079b001 00000000ffffffff 00000000ffffffff [ 101.583037][ T5820] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 101.583047][ T5820] page dumped because: kasan: bad access detected [ 101.583061][ T5820] page_owner tracks the page as allocated [ 101.583071][ T5820] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3027321303, free_ts 0 [ 101.583103][ T5820] post_alloc_hook+0x234/0x290 [ 101.583128][ T5820] get_page_from_freelist+0x28c0/0x2960 [ 101.583146][ T5820] __alloc_frozen_pages_noprof+0x181/0x370 [ 101.583163][ T5820] alloc_pages_mpol+0xd1/0x380 [ 101.583179][ T5820] allocate_slab+0x86/0x3b0 [ 101.583198][ T5820] ___slab_alloc+0xb10/0x13e0 [ 101.583215][ T5820] __slab_alloc+0xc6/0x1f0 [ 101.583231][ T5820] __kmalloc_cache_noprof+0x101/0x6d0 [ 101.583255][ T5820] acpi_ds_create_walk_state+0x96/0x270 [ 101.583280][ T5820] acpi_ds_call_control_method+0x325/0xa00 [ 101.583302][ T5820] acpi_ps_parse_aml+0x671/0x10a0 [ 101.583326][ T5820] acpi_ps_execute_method+0x88f/0xa60 [ 101.583343][ T5820] acpi_ns_evaluate+0xc49/0x1230 [ 101.583359][ T5820] acpi_evaluate_object+0x651/0xd40 [ 101.583381][ T5820] acpi_get_phys_id+0xa9/0xa10 [ 101.583402][ T5820] acpi_get_cpuid+0x30/0x1f0 [ 101.583423][ T5820] page_owner free stack trace missing [ 101.583430][ T5820] [ 101.583434][ T5820] Memory state around the buggy address: [ 101.583444][ T5820] ffff88801e6c1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.583458][ T5820] ffff88801e6c1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.583470][ T5820] >ffff88801e6c1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.583480][ T5820] ^ [ 101.583491][ T5820] ffff88801e6c1800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.583503][ T5820] ffff88801e6c1880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.583513][ T5820] ================================================================== [ 101.583535][ T5820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.583553][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.583575][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.583588][ T5820] Workqueue: hci2 hci_rx_work [ 101.583607][ T5820] Call Trace: [ 101.583615][ T5820] [ 101.583622][ T5820] vpanic+0x1e0/0x670 [ 101.583649][ T5820] panic+0xb9/0xc0 [ 101.583673][ T5820] ? __pfx_panic+0x10/0x10 [ 101.583699][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.583722][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.583743][ T5820] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.583770][ T5820] check_panic_on_warn+0x89/0xb0 [ 101.583798][ T5820] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.583825][ T5820] end_report+0x6f/0x140 [ 101.583842][ T5820] kasan_report+0x129/0x150 [ 101.583860][ T5820] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.583891][ T5820] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 101.583920][ T5820] l2cap_connect_cfm+0x367/0x10e0 [ 101.583949][ T5820] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 101.583973][ T5820] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 101.583998][ T5820] ? mutex_lock_nested+0x154/0x1d0 [ 101.584021][ T5820] ? hci_connect_cfm+0x2c/0x140 [ 101.584041][ T5820] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 101.584066][ T5820] hci_connect_cfm+0x95/0x140 [ 101.584088][ T5820] le_conn_complete_evt+0xf65/0x1420 [ 101.584111][ T5820] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.584132][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 101.584161][ T5820] hci_le_conn_complete_evt+0x187/0x480 [ 101.584186][ T5820] hci_event_packet+0x78f/0x1260 [ 101.584215][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 101.584237][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 101.584264][ T5820] ? preempt_schedule_common+0x83/0xd0 [ 101.584291][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.584313][ T5820] ? hci_send_to_monitor+0xe2/0x590 [ 101.584338][ T5820] hci_rx_work+0x3ee/0x1060 [ 101.584356][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 101.584377][ T5820] ? process_scheduled_works+0x9ef/0x1770 [ 101.584399][ T5820] process_scheduled_works+0xad1/0x1770 [ 101.584432][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.584452][ T5820] ? do_raw_spin_lock+0x121/0x290 [ 101.584480][ T5820] worker_thread+0x8a0/0xda0 [ 101.584508][ T5820] ? __kthread_parkme+0x7b/0x200 [ 101.584534][ T5820] kthread+0x711/0x8a0 [ 101.584559][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 101.584580][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.584603][ T5820] ? rt_spin_unlock+0x150/0x200 [ 101.584628][ T5820] ? rt_spin_unlock+0x161/0x200 [ 101.584651][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.584676][ T5820] ret_from_fork+0x510/0xa50 [ 101.584697][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 101.584713][ T5820] ? __switch_to+0xc9e/0x1480 [ 101.584738][ T5820] ? __pfx_kthread+0x10/0x10 [ 101.584763][ T5820] ret_from_fork_asm+0x1a/0x30 [ 101.584797][ T5820] [ 101.585155][ T5820] Kernel Offset: disabled