last executing test programs: 11.607239098s ago: executing program 2 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) 10.181509307s ago: executing program 2 (id=95): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000340)={{0x8, 0xf, 0x3, 0xffa}, 'syz0\x00', 0x3e}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 8.84742887s ago: executing program 3 (id=98): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 7.657693909s ago: executing program 3 (id=100): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000008780), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) socket(0x2, 0x2, 0x20024) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 7.615152746s ago: executing program 1 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x40011, 0x0, 0xfb, 0x0, 0x0, 0x0) r4 = gettid() kcmp(r4, r3, 0xb44c031f136537ae, 0xffffffffffffffff, 0xffffffffffffffff) 6.593622167s ago: executing program 1 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xb375) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xb375) 4.587802342s ago: executing program 1 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000100000000000000500000a14000000fa03010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r3, 0x4, 0x42400) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4e240, 0x1ae) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 4.535391151s ago: executing program 0 (id=104): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x29, 0x1, {0x2}}, 0xb) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/140, 0x8c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x27, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x1, 0x6, 0x6, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0xbb, &(0x7f0000000740)=""/187, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xb, 0x4, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x8, &(0x7f0000000880)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r4], &(0x7f00000008c0)=[{0x2, 0x1, 0xe, 0x1}, {0x0, 0x2, 0x2}, {0x2, 0x1, 0x2, 0x3}, {0x1, 0x2, 0xf, 0x1}, {0x5, 0x2, 0xd, 0x5}, {0x1, 0x3, 0x2, 0x16}, {0x3, 0x2, 0x6, 0x7}, {0x3, 0x3, 0x10, 0x3}], 0x10, 0x4}, 0x94) close(0x3) 3.941462101s ago: executing program 0 (id=105): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99ce", 0x65}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93d", 0x51}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada1", 0x2d}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.940734061s ago: executing program 3 (id=106): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffd, 0x2) r1 = socket(0x2, 0xa, 0x0) getpeername$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x36, 0x0, 0x0) 3.546851487s ago: executing program 2 (id=107): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x5, @mcast1, 0x7}}}, &(0x7f0000000080)=0xfd9d) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000480)='\a', &(0x7f0000000400)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.516244732s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, 0x0) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01010000000000", @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x2004c484}, 0x8000) 3.496996595s ago: executing program 0 (id=109): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.46947051s ago: executing program 1 (id=110): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2.653726746s ago: executing program 2 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0xda) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1", 0x1c}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) set_mempolicy(0x4000, 0x0, 0x400000000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.51097563s ago: executing program 3 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xb}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0xc}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c010) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 2.45331477s ago: executing program 1 (id=113): syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x501) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.236752716s ago: executing program 0 (id=114): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000a2c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x38, 0x4000000}}], 0x1, 0x0) 2.042700339s ago: executing program 1 (id=115): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 1.934631997s ago: executing program 3 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 1.205541669s ago: executing program 0 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0xb8}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r5, 0x400, 0x1) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) 1.085946578s ago: executing program 0 (id=118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40045}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 991.012254ms ago: executing program 2 (id=119): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x400004, 0xfffffffffffffffe, 0x800}) 0s ago: executing program 2 (id=120): r0 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3517, 0xc2de, 0x9, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0xe00) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 65.536600][ T5751] cgroup: Unknown subsys name 'net' [ 65.652581][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.126627][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.258450][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.267810][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.272844][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.278057][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.291299][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.293904][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.309019][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.309863][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.325697][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.327956][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.337003][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.344879][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.351369][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.357275][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.365710][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.371631][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.380131][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.386801][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.404220][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.414083][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.423009][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.432779][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.441210][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.451088][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.851671][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 69.928842][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 70.040816][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 70.057830][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.066029][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.073624][ T5770] bridge_slave_0: entered allmulticast mode [ 70.081002][ T5770] bridge_slave_0: entered promiscuous mode [ 70.090223][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 70.111905][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.121479][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.129543][ T5770] bridge_slave_1: entered allmulticast mode [ 70.137903][ T5770] bridge_slave_1: entered promiscuous mode [ 70.232122][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.258297][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.266852][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.274763][ T5768] bridge_slave_0: entered allmulticast mode [ 70.283857][ T5768] bridge_slave_0: entered promiscuous mode [ 70.292358][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.301699][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.309588][ T5768] bridge_slave_1: entered allmulticast mode [ 70.317886][ T5768] bridge_slave_1: entered promiscuous mode [ 70.327237][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.389635][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.398678][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.406669][ T5773] bridge_slave_0: entered allmulticast mode [ 70.414036][ T5773] bridge_slave_0: entered promiscuous mode [ 70.450501][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.458757][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.466851][ T5773] bridge_slave_1: entered allmulticast mode [ 70.474165][ T5773] bridge_slave_1: entered promiscuous mode [ 70.481796][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.489747][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.497791][ T5767] bridge_slave_0: entered allmulticast mode [ 70.505535][ T5767] bridge_slave_0: entered promiscuous mode [ 70.513557][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.521004][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.529265][ T5767] bridge_slave_1: entered allmulticast mode [ 70.537090][ T5767] bridge_slave_1: entered promiscuous mode [ 70.546318][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.560241][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.575503][ T5770] team0: Port device team_slave_0 added [ 70.611830][ T5770] team0: Port device team_slave_1 added [ 70.658562][ T5768] team0: Port device team_slave_0 added [ 70.676992][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.693298][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.706328][ T5768] team0: Port device team_slave_1 added [ 70.717026][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.729027][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.738977][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.767825][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.788439][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.820353][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.829426][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.860483][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.931023][ T5773] team0: Port device team_slave_0 added [ 70.937992][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.947026][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.975601][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.990159][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.997587][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.028272][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.043336][ T5767] team0: Port device team_slave_0 added [ 71.059009][ T5773] team0: Port device team_slave_1 added [ 71.075364][ T5767] team0: Port device team_slave_1 added [ 71.097375][ T5770] hsr_slave_0: entered promiscuous mode [ 71.104688][ T5770] hsr_slave_1: entered promiscuous mode [ 71.141174][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.149267][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.180962][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.222336][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.230243][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.259296][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.275788][ T5768] hsr_slave_0: entered promiscuous mode [ 71.282646][ T5768] hsr_slave_1: entered promiscuous mode [ 71.290139][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.298820][ T5768] Cannot create hsr debugfs directory [ 71.314220][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.322099][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.349789][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.377179][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.387371][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.416227][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.467217][ T5782] Bluetooth: hci3: command tx timeout [ 71.497546][ T5773] hsr_slave_0: entered promiscuous mode [ 71.505121][ T5773] hsr_slave_1: entered promiscuous mode [ 71.512533][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.521877][ T5773] Cannot create hsr debugfs directory [ 71.545092][ T5771] Bluetooth: hci0: command tx timeout [ 71.545159][ T5780] Bluetooth: hci1: command tx timeout [ 71.559037][ T5782] Bluetooth: hci2: command tx timeout [ 71.640900][ T5767] hsr_slave_0: entered promiscuous mode [ 71.648453][ T5767] hsr_slave_1: entered promiscuous mode [ 71.656105][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.666273][ T5767] Cannot create hsr debugfs directory [ 71.793221][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.802377][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.996803][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.022380][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.041295][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.052160][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.124569][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.139776][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.150809][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.161891][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.245433][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.259331][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.270088][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.289999][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.400057][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.410663][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.422912][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.434202][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.471418][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.538983][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.573616][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.581934][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.610140][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.631296][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.639984][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.681455][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.697725][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.740355][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.763039][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.773325][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.808035][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.816781][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.866122][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.898248][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.918927][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.927103][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.961785][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.973018][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.989733][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.998184][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.050536][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.058989][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.111027][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.271847][ T5770] veth0_vlan: entered promiscuous mode [ 73.320770][ T5770] veth1_vlan: entered promiscuous mode [ 73.419756][ T5770] veth0_macvtap: entered promiscuous mode [ 73.459667][ T5770] veth1_macvtap: entered promiscuous mode [ 73.509000][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.551324][ T5782] Bluetooth: hci3: command tx timeout [ 73.567075][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.610066][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.621278][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.631188][ T5782] Bluetooth: hci0: command tx timeout [ 73.631242][ T5782] Bluetooth: hci1: command tx timeout [ 73.637624][ T5782] Bluetooth: hci2: command tx timeout [ 73.656113][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.666768][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.675996][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.742578][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.774640][ T5768] veth0_vlan: entered promiscuous mode [ 73.830536][ T5768] veth1_vlan: entered promiscuous mode [ 73.852338][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.893380][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912691][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.980420][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.989341][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.011306][ T5767] veth0_vlan: entered promiscuous mode [ 74.040645][ T5768] veth0_macvtap: entered promiscuous mode [ 74.058126][ T5773] veth0_vlan: entered promiscuous mode [ 74.072066][ T5767] veth1_vlan: entered promiscuous mode [ 74.103313][ T5768] veth1_macvtap: entered promiscuous mode [ 74.142376][ T5773] veth1_vlan: entered promiscuous mode [ 74.217994][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.831391][ T5771] Bluetooth: hci3: command tx timeout [ 75.837299][ T5782] Bluetooth: hci2: command tx timeout [ 75.837332][ T5084] Bluetooth: hci0: command tx timeout [ 75.849973][ T5780] Bluetooth: hci1: command tx timeout [ 75.855737][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.857459][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.977635][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.999829][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.013535][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.057985][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.068289][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.077514][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086648][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.113818][ T5767] veth0_macvtap: entered promiscuous mode [ 76.138929][ T5767] veth1_macvtap: entered promiscuous mode [ 76.148032][ T5773] veth0_macvtap: entered promiscuous mode [ 76.215881][ T5773] veth1_macvtap: entered promiscuous mode [ 76.234466][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.247212][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.257738][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.270011][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.283458][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.319484][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.334717][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.346914][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.358708][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.369397][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.381401][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.394385][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.427179][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.441727][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.445173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.456465][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.471029][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.482009][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.494313][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.522710][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.536077][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.546506][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.558915][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.570213][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.581463][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.594593][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.651043][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672734][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.682923][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.692406][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.826076][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.836667][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.849454][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.857237][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.858441][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.868379][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.918844][ T5780] Bluetooth: hci3: command tx timeout [ 77.925511][ T5780] Bluetooth: hci2: command tx timeout [ 77.950132][ T5084] Bluetooth: hci1: command tx timeout [ 77.956441][ T5780] Bluetooth: hci0: command tx timeout [ 78.058850][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.106397][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.188849][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.322784][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.342432][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.010190][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.048421][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.100549][ T5851] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.125216][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.144007][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.107590][ T5879] syz.3.10[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.393373][ T5879] loop3: detected capacity change from 0 to 32768 [ 82.403193][ T5879] ======================================================= [ 82.403193][ T5879] WARNING: The mand mount option has been deprecated and [ 82.403193][ T5879] and is ignored by this kernel. Remove the mand [ 82.403193][ T5879] option from the mount to silence this warning. [ 82.403193][ T5879] ======================================================= [ 82.806276][ T5879] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.218636][ T5879] XFS (loop3): Ending clean mount [ 83.739455][ T5830] IPVS: starting estimator thread 0... [ 83.964353][ T5879] XFS (loop3): Quotacheck needed: Please wait. [ 84.135229][ T5901] IPVS: using max 20 ests per chain, 48000 per kthread [ 84.166248][ T5879] XFS (loop3): Quotacheck: Done. [ 84.632930][ T5905] xt_hashlimit: size too large, truncated to 1048576 [ 84.778001][ T5905] syz.3.10: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 84.796143][ T5905] CPU: 0 PID: 5905 Comm: syz.3.10 Not tainted syzkaller #0 [ 84.803621][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 84.814253][ T5905] Call Trace: [ 84.817671][ T5905] [ 84.820720][ T5905] dump_stack_lvl+0x18c/0x250 [ 84.825626][ T5905] ? show_regs_print_info+0x20/0x20 [ 84.831121][ T5905] ? load_image+0x420/0x420 [ 84.835929][ T5905] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.842799][ T5905] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 84.849790][ T5905] warn_alloc+0x246/0x340 [ 84.854347][ T5905] ? zone_watermark_ok_safe+0x230/0x230 [ 84.860388][ T5905] ? _raw_spin_unlock+0x28/0x40 [ 84.866001][ T5905] __vmalloc_node_range+0x662/0x1330 [ 84.871569][ T5905] ? free_vm_area+0x50/0x50 [ 84.877069][ T5905] ? htable_create+0xf2/0x790 [ 84.882209][ T5905] vmalloc+0x79/0x90 [ 84.886311][ T5905] ? htable_create+0xf2/0x790 [ 84.891288][ T5905] htable_create+0xf2/0x790 [ 84.896019][ T5905] hashlimit_mt_check_common+0x6ca/0x9e0 [ 84.902307][ T5905] xt_check_match+0x4ea/0xc50 [ 84.907460][ T5905] ? xt_check_proc_name+0x270/0x270 [ 84.912912][ T5905] ? strcmp+0x28/0xb0 [ 84.917186][ T5905] ? xt_find_match+0x1f1/0x230 [ 84.922051][ T5905] translate_table+0x1533/0x2090 [ 84.927094][ T5905] ? ip6t_register_table+0x7e0/0x7e0 [ 84.932522][ T5905] ? lock_chain_count+0x20/0x20 [ 84.937560][ T5905] ? lockdep_hardirqs_on+0x98/0x150 [ 84.942938][ T5905] ? do_ip6t_set_ctl+0x946/0xe10 [ 84.948129][ T5905] do_ip6t_set_ctl+0x9fc/0xe10 [ 84.953269][ T5905] ? ip6t_unregister_table_exit+0x230/0x230 [ 84.959792][ T5905] ? __lock_acquire+0x7d40/0x7d40 [ 84.964998][ T5905] ? rcu_is_watching+0x15/0xb0 [ 84.970009][ T5905] ? trace_contention_end+0x39/0xe0 [ 84.975461][ T5905] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 84.981279][ T5905] ? mutex_unlock+0x10/0x10 [ 84.986516][ T5905] nf_setsockopt+0x263/0x280 [ 84.991687][ T5905] rawv6_setsockopt+0x276/0x5e0 [ 84.996734][ T5905] ? raw6_destroy+0x30/0x30 [ 85.001994][ T5905] ? __fget_files+0x28/0x4b0 [ 85.007087][ T5905] ? aa_sock_opt_perm+0x74/0x100 [ 85.013370][ T5905] ? sock_common_setsockopt+0x36/0xc0 [ 85.020275][ T5905] ? sock_common_recvmsg+0x190/0x190 [ 85.026461][ T5905] do_sock_setsockopt+0x175/0x1a0 [ 85.031784][ T5905] ? __fdget+0x180/0x210 [ 85.036998][ T5905] __x64_sys_setsockopt+0x182/0x200 [ 85.042926][ T5905] do_syscall_64+0x55/0xa0 [ 85.048044][ T5905] ? clear_bhb_loop+0x40/0x90 [ 85.053170][ T5905] ? clear_bhb_loop+0x40/0x90 [ 85.058343][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.064845][ T5905] RIP: 0033:0x7fb79039c819 [ 85.069699][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.092103][ T5905] RSP: 002b:00007fb7911ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.101322][ T5905] RAX: ffffffffffffffda RBX: 00007fb790616180 RCX: 00007fb79039c819 [ 85.110026][ T5905] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 85.118398][ T5905] RBP: 00007fb790432c91 R08: 0000000000000528 R09: 0000000000000000 [ 85.127174][ T5905] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 85.135873][ T5905] R13: 00007fb790616218 R14: 00007fb790616180 R15: 00007ffeb6f397e8 [ 85.144409][ T5905] [ 85.148881][ T5905] Mem-Info: [ 85.152214][ T5905] active_anon:15371 inactive_anon:0 isolated_anon:0 [ 85.152214][ T5905] active_file:11089 inactive_file:40014 isolated_file:0 [ 85.152214][ T5905] unevictable:768 dirty:1756 writeback:0 [ 85.152214][ T5905] slab_reclaimable:10101 slab_unreclaimable:90608 [ 85.152214][ T5905] mapped:30093 shmem:11197 pagetables:549 [ 85.152214][ T5905] sec_pagetables:0 bounce:0 [ 85.152214][ T5905] kernel_misc_reclaimable:0 [ 85.152214][ T5905] free:1344542 free_pcp:11903 free_cma:0 [ 85.206567][ T5905] Node 0 active_anon:61484kB inactive_anon:0kB active_file:44356kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120372kB dirty:7020kB writeback:0kB shmem:43252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10740kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no [ 85.216038][ T28] audit: type=1800 audit(1776100312.671:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name="file0" dev="loop3" ino=4420 res=0 errno=0 [ 85.245632][ T5905] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 85.245705][ T5905] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.245756][ T5905] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 85.245794][ T5905] Node 0 DMA32 free:1471572kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:61444kB inactive_anon:0kB active_file:44356kB inactive_file:159032kB unevictable:1536kB writepending:7016kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:27824kB local_pcp:8756kB free_cma:0kB [ 85.380505][ T5905] lowmem_reserve[]: 0 0 0 0 0 [ 85.385408][ T5905] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.413436][ T5905] lowmem_reserve[]: 0 0 0 0 0 [ 85.415357][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 85.418290][ T5905] Node 1 Normal free:3891228kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19448kB local_pcp:6880kB free_cma:0kB [ 85.460045][ T5905] lowmem_reserve[]: 0 0 0 0 0 [ 85.465050][ T5905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.478939][ T5905] Node 0 DMA32: 45*4kB (UM) 20*8kB (M) 258*16kB (UM) 120*32kB (ME) 4*64kB (ME) 2*128kB (ME) 1*256kB (U) 6*512kB (M) 5*1024kB (ME) 5*2048kB (UME) 352*4096kB (M) = 1469300kB [ 85.491700][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 85.497038][ T5905] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 85.497160][ T5905] Node 1 Normal: 189*4kB (UME) 69*8kB (UME) 38*16kB (UME) 59*32kB (UME) 19*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3891228kB [ 85.538747][ T5905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.553146][ T5905] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 85.562753][ T5905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.572950][ T5905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.582615][ T5905] 62525 total pagecache pages [ 85.587438][ T5905] 0 pages in swap cache [ 85.591871][ T5905] Free swap = 124996kB [ 85.596467][ T5905] Total swap = 124996kB [ 85.600629][ T5905] 2097051 pages RAM [ 85.604621][ T5905] 0 pages HighMem/MovableOnly [ 85.609470][ T5905] 416927 pages reserved [ 85.614454][ T5905] 0 pages cma reserved [ 85.799035][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.871529][ T5909] team0: Port device bridge1 added [ 85.929986][ T5914] macvlan2: entered promiscuous mode [ 85.983503][ T5914] macvlan2: entered allmulticast mode [ 85.989580][ T5914] team0: Device macvlan2 is already an upper device of the team interface [ 87.374562][ T9] cfg80211: failed to load regulatory.db [ 89.017246][ T5934] bridge_slave_0: left allmulticast mode [ 89.050492][ T5934] bridge_slave_0: left promiscuous mode [ 89.070245][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.258595][ T5934] bridge_slave_1: left allmulticast mode [ 89.295621][ T5934] bridge_slave_1: left promiscuous mode [ 89.541370][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.589968][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.849342][ T5934] bond0: (slave bond_slave_0): Releasing backup interface [ 89.930960][ T5934] bond0: (slave bond_slave_1): Releasing backup interface [ 90.038486][ T5934] team0: Port device team_slave_0 removed [ 90.080707][ T5934] team0: Port device team_slave_1 removed [ 90.093908][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.104996][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 90.118135][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.130049][ T787] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 90.146483][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.382328][ T787] usb 4-1: config 0 has no interface number 0 [ 90.389826][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.402044][ T787] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 90.412698][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.422332][ T787] usb 4-1: Product: syz [ 90.428602][ T787] usb 4-1: Manufacturer: syz [ 90.811644][ T28] audit: type=1326 audit(1776100318.891:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 90.858933][ T787] usb 4-1: SerialNumber: syz [ 90.890525][ T787] usb 4-1: config 0 descriptor?? [ 90.898332][ T28] audit: type=1326 audit(1776100318.891:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 90.926301][ T787] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.942586][ T28] audit: type=1326 audit(1776100318.921:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 90.980789][ T28] audit: type=1326 audit(1776100318.921:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 91.079808][ T28] audit: type=1326 audit(1776100318.921:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 91.254589][ T28] audit: type=1326 audit(1776100318.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 91.296513][ T787] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 92.005595][ T28] audit: type=1326 audit(1776100318.961:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 92.069543][ T28] audit: type=1326 audit(1776100318.961:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 92.150698][ T28] audit: type=1326 audit(1776100318.961:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 92.296869][ T787] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 92.317646][ T28] audit: type=1326 audit(1776100318.961:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91199c819 code=0x7ffc0000 [ 92.317933][ T5934] team0: Mode changed to "loadbalance" [ 92.391533][ T5969] loop0: detected capacity change from 0 to 4096 [ 92.419717][ T5969] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 92.434877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.535556][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 92.917356][ T5973] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.684877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.704882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.655283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 94.705401][ T5985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.114870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.278637][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 97.280731][ T5813] usb 4-1: USB disconnect, device number 2 [ 97.323601][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 97.405335][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 97.450680][ T5813] quatech2 4-1:0.51: device disconnected [ 97.578912][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 97.905196][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 99.213173][ T6010] syzkaller0: entered promiscuous mode [ 99.219422][ T6010] syzkaller0: entered allmulticast mode [ 99.965599][ T6015] Bluetooth: MGMT ver 1.22 [ 100.168809][ T6019] loop1: detected capacity change from 0 to 1024 [ 102.745194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.086630][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.507488][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.590342][ T6034] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 103.601708][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 103.942781][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.996088][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 104.349783][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 104.435631][ T6054] syzkaller0: entered promiscuous mode [ 104.444608][ T6054] syzkaller0: entered allmulticast mode [ 104.647671][ T6057] loop2: detected capacity change from 0 to 2048 [ 104.925771][ T6057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.412309][ T6067] mmap: syz.3.59 (6067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.023589][ T6071] loop1: detected capacity change from 0 to 2048 [ 107.130777][ T6071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.674727][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.682949][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.704476][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.928967][ T6084] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 107.996278][ T6082] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.106466][ T6082] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.211176][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 108.219917][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 108.228020][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 108.235721][ T6082] virt_wifi0 speed is unknown, defaulting to 1000 [ 108.275534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.342954][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.952660][ T6120] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 112.960680][ T6120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.971076][ T6120] vhci_hcd vhci_hcd.0: Device attached [ 113.307105][ T27] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 113.784667][ T6121] vhci_hcd: connection reset by peer [ 113.910176][ T1083] vhci_hcd: stop threads [ 113.940242][ T1083] vhci_hcd: release socket [ 113.967556][ T1083] vhci_hcd: disconnect device [ 115.147653][ T6130] loop3: detected capacity change from 0 to 164 [ 116.963179][ T6150] warning: `syz.1.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.122521][ T6150] bridge_slave_0: left allmulticast mode [ 117.149509][ T6150] bridge_slave_0: left promiscuous mode [ 117.166951][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.201540][ T6150] bridge_slave_1: left allmulticast mode [ 117.221707][ T6150] bridge_slave_1: left promiscuous mode [ 117.231500][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.255826][ T6150] bond0: (slave bond_slave_0): Releasing backup interface [ 117.297602][ T6150] bond0: (slave bond_slave_1): Releasing backup interface [ 117.324115][ T6150] team0: Port device team_slave_0 removed [ 117.353822][ T6150] team0: Port device team_slave_1 removed [ 117.360524][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.370105][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.379193][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.389307][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.413117][ T6155] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 117.443733][ T6155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.453810][ T6156] syzkaller0: entered promiscuous mode [ 117.459710][ T6156] syzkaller0: entered allmulticast mode [ 117.519862][ T6162] tipc: Started in network mode [ 117.527519][ T6162] tipc: Node identity a631ca1d8dc7, cluster identity 4711 [ 117.537290][ T6162] tipc: Enabled bearer , priority 0 [ 117.634741][ T6163] syzkaller0: entered promiscuous mode [ 117.646051][ T6163] syzkaller0: entered allmulticast mode [ 117.705768][ T6160] tipc: Resetting bearer [ 117.742508][ T6159] tipc: Resetting bearer [ 117.837832][ T6159] tipc: Disabling bearer [ 117.971364][ T6172] Zero length message leads to an empty skb [ 118.595356][ T27] vhci_hcd: vhci_device speed not set [ 120.663351][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 122.438042][ T6214] input: syz0 as /devices/virtual/input/input5 [ 127.948814][ T5830] IPVS: starting estimator thread 0... [ 128.249017][ T6241] IPVS: using max 26 ests per chain, 62400 per kthread [ 128.316471][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 128.316480][ T28] audit: type=1107 audit(1776100356.461:17): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 128.653663][ T6251] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 128.722387][ T6244] syz.1.103 (6244) used greatest stack depth: 17936 bytes left [ 129.552479][ T6246] syz.1.103 (6246) used greatest stack depth: 17608 bytes left [ 129.736102][ T6271] netlink: 184 bytes leftover after parsing attributes in process `syz.2.111'. [ 129.820214][ T6271] bond0: entered allmulticast mode [ 129.850667][ T6271] bond_slave_0: entered allmulticast mode [ 129.884338][ T6271] bond_slave_1: entered allmulticast mode [ 129.974592][ T6275] syzkaller0: entered promiscuous mode [ 129.980722][ T6275] syzkaller0: entered allmulticast mode [ 131.158154][ T6288] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 132.685738][ T6301] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.120'. [ 133.055556][ C1] ------------[ cut here ]------------ [ 133.062166][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 133.073047][ C1] Modules linked in: [ 133.077148][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 133.084513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 133.095740][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 133.102321][ C1] Code: 24 4c 89 e7 e8 8e 80 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 be 82 f7 0f 0b e9 f6 f7 ff ff e8 6d be 82 f7 <0f> 0b e9 48 fb ff ff e8 61 be 82 f7 48 c7 c7 00 85 64 8e 4c 89 e6 [ 133.123707][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 133.129516][ T48] ------------[ cut here ]------------ [ 133.130445][ C1] RAX: ffffffff8a046393 RBX: ffffffff8a045196 RCX: ffff88801a273c00 [ 133.136513][ T48] WARNING: CPU: 0 PID: 48 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.144754][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.156188][ T48] Modules linked in: [ 133.156207][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 133.156225][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 133.156237][ T48] Workqueue: phy5 ieee80211_csa_finalize_work [ 133.156267][ T48] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.165274][ C1] RBP: 0000000000000000 R08: ffff88801a273c00 R09: 0000000000000003 [ 133.165294][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805702e3c0 [ 133.165308][ C1] R13: dffffc0000000000 R14: ffff88805702e8b0 R15: ffff88805e308024 [ 133.165322][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 133.165338][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.165352][ C1] CR2: 0000001b2d710ff8 CR3: 000000007d05e000 CR4: 00000000003506e0 [ 133.165370][ C1] Call Trace: [ 133.165377][ C1] [ 133.165388][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 133.165427][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 133.165456][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 133.165493][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 133.165526][ C1] __iterate_interfaces+0x243/0x500 [ 133.165554][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 133.165572][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 133.165602][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 133.165626][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 133.165659][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 133.165685][ C1] __hrtimer_run_queues+0x520/0xc40 [ 133.165707][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 133.165739][ C1] ? hw_scan_work+0xf60/0xf60 [ 133.165767][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 133.165788][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 133.165821][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 133.165848][ C1] handle_softirqs+0x280/0x820 [ 133.165873][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 133.166200][ C1] ? do_softirq+0x1a0/0x1a0 [ 133.166231][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 133.166300][ C1] __irq_exit_rcu+0xd3/0x190 [ 133.166321][ C1] ? irq_exit_rcu+0x20/0x20 [ 133.166344][ C1] irq_exit_rcu+0x9/0x20 [ 133.166358][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 133.170802][ T48] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 133.170826][ T48] RSP: 0018:ffffc90000b979c0 EFLAGS: 00010293 [ 133.170846][ T48] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff88801ce49e00 [ 133.170861][ T48] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 133.170872][ T48] RBP: dffffc0000000000 R08: ffff88805702d5af R09: 1ffff1100ae05ab5 [ 133.170885][ T48] R10: dffffc0000000000 R11: ffffed100ae05ab6 R12: 0000000000000001 [ 133.170896][ T48] R13: ffff88805702e5d9 R14: ffff88801e302c70 R15: ffff88801e302ce8 [ 133.178675][ C1] [ 133.178687][ C1] [ 133.178695][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.178726][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 133.178748][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 133.178764][ C1] RSP: 0018:ffffc90000187b58 EFLAGS: 00000282 [ 133.178782][ C1] RAX: 32220689a1abf000 RBX: 0000000000000000 RCX: 32220689a1abf000 [ 133.178794][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 133.178807][ C1] RBP: ffffc90000187bb0 R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 133.178820][ C1] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: ffff88801a273c00 [ 133.189621][ T48] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 133.189642][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.189656][ T48] CR2: 00007feaf1a436fb CR3: 0000000024ddb000 CR4: 00000000003506f0 [ 133.189672][ T48] Call Trace: [ 133.189681][ T48] [ 133.189703][ T48] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 133.189735][ T48] ieee80211_csa_finalize+0x5a6/0xf20 [ 133.189759][ T48] ? mutex_lock_nested+0x20/0x20 [ 133.189778][ T48] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 133.196455][ C1] R13: dffffc0000000000 R14: ffff888031439e00 R15: ffff8880b8f3cac8 [ 133.204444][ T48] ? ieee80211_csa_finalize_work+0x140/0x140 [ 133.204475][ T48] ? read_lock_is_recursive+0x20/0x20 [ 133.204521][ T48] ieee80211_csa_finalize_work+0xf6/0x140 [ 133.204546][ T48] ? process_scheduled_works+0x96f/0x15d0 [ 133.204569][ T48] process_scheduled_works+0xa5d/0x15d0 [ 133.214907][ C1] ? finish_task_switch+0x265/0x8f0 [ 133.223516][ T48] ? worker_attach_to_pool+0x380/0x380 [ 133.223551][ T48] ? assign_work+0x3d2/0x5d0 [ 133.223578][ T48] worker_thread+0xa55/0xfc0 [ 133.233089][ C1] __schedule+0x155b/0x45a0 [ 133.249535][ T48] kthread+0x2fa/0x390 [ 133.251533][ C1] ? asan.module_dtor+0x20/0x20 [ 133.261450][ T48] ? pr_cont_work+0x560/0x560 [ 133.263988][ C1] ? tick_nohz_idle_exit+0x2be/0x3d0 [ 133.267645][ T48] ? kthread_blkcg+0xd0/0xd0 [ 133.274896][ C1] ? flush_smp_call_function_queue+0x11e/0x250 [ 133.281070][ T48] ret_from_fork+0x48/0x80 [ 133.288690][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 133.296363][ T48] ? kthread_blkcg+0xd0/0xd0 [ 133.296398][ T48] ret_from_fork_asm+0x11/0x20 [ 133.296438][ T48] [ 133.296448][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.296468][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 133.296483][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 133.296492][ T48] Workqueue: phy5 ieee80211_csa_finalize_work [ 133.296516][ T48] Call Trace: [ 133.296525][ T48] [ 133.296531][ T48] dump_stack_lvl+0x18c/0x250 [ 133.296565][ T48] ? show_regs_print_info+0x20/0x20 [ 133.296594][ T48] ? load_image+0x420/0x420 [ 133.296622][ T48] panic+0x2dc/0x730 [ 133.296643][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 133.296668][ T48] ? ret_from_fork_asm+0x11/0x20 [ 133.296691][ T48] __warn+0x2e0/0x470 [ 133.296707][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.296729][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.296747][ T48] report_bug+0x2be/0x4f0 [ 133.296762][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.296779][ T48] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.296797][ T48] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 133.296814][ T48] handle_bug+0xcf/0x120 [ 133.296829][ T48] exc_invalid_op+0x1a/0x50 [ 133.296844][ T48] asm_exc_invalid_op+0x1a/0x20 [ 133.296861][ T48] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 133.296880][ T48] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 133.296892][ T48] RSP: 0018:ffffc90000b979c0 EFLAGS: 00010293 [ 133.297032][ T48] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff88801ce49e00 [ 133.297044][ T48] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 133.297053][ T48] RBP: dffffc0000000000 R08: ffff88805702d5af R09: 1ffff1100ae05ab5 [ 133.297068][ T48] R10: dffffc0000000000 R11: ffffed100ae05ab6 R12: 0000000000000001 [ 133.297078][ T48] R13: ffff88805702e5d9 R14: ffff88801e302c70 R15: ffff88801e302ce8 [ 133.297098][ T48] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 133.297141][ T48] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 133.297165][ T48] ieee80211_csa_finalize+0x5a6/0xf20 [ 133.297183][ T48] ? mutex_lock_nested+0x20/0x20 [ 133.297197][ T48] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 133.297212][ T48] ? ieee80211_csa_finalize_work+0x140/0x140 [ 133.297228][ T48] ? read_lock_is_recursive+0x20/0x20 [ 133.297251][ T48] ieee80211_csa_finalize_work+0xf6/0x140 [ 133.297271][ T48] ? process_scheduled_works+0x96f/0x15d0 [ 133.297291][ T48] process_scheduled_works+0xa5d/0x15d0 [ 133.297339][ T48] ? worker_attach_to_pool+0x380/0x380 [ 133.297370][ T48] ? assign_work+0x3d2/0x5d0 [ 133.297395][ T48] worker_thread+0xa55/0xfc0 [ 133.297442][ T48] kthread+0x2fa/0x390 [ 133.297457][ T48] ? pr_cont_work+0x560/0x560 [ 133.297477][ T48] ? kthread_blkcg+0xd0/0xd0 [ 133.297492][ T48] ret_from_fork+0x48/0x80 [ 133.297510][ T48] ? kthread_blkcg+0xd0/0xd0 [ 133.297527][ T48] ret_from_fork_asm+0x11/0x20 [ 133.297558][ T48] [ 133.303781][ T48] Kernel Offset: disabled