last executing test programs: 5.986837908s ago: executing program 0 (id=18): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.406392445s ago: executing program 0 (id=22): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) 5.093577129s ago: executing program 4 (id=5): r0 = socket$kcm(0x10, 0x2, 0x4) setreuid(0xffffffffffffffff, 0xee00) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.529653312s ago: executing program 2 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4377, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 4.403641158s ago: executing program 4 (id=28): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f00004fa000/0x4000)=nil, 0x4000, 0x7fffffff}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x3, r1, r1, 0x7, 0xfffffffffffffffa, 0x3fff}) 3.990245929s ago: executing program 2 (id=30): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\t\x00', 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x504, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}}}}}, 0x0) 3.905410412s ago: executing program 4 (id=31): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 3.904707544s ago: executing program 0 (id=32): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f00000002c0)={0x0, 0x30, 0xc, "48277ad8ac8de9a2014f4719"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="00052800000019a2"], 0x0, 0x0}) 3.640463223s ago: executing program 2 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 3.465105919s ago: executing program 3 (id=35): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000400)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 3.144403643s ago: executing program 4 (id=37): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c46040700030400000000000000020003000300000009030000385e5800ce0000000e0000000b00200001"], 0x258) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3.003630884s ago: executing program 3 (id=39): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 2.787635714s ago: executing program 4 (id=40): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000006c0)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f000010"], 0x0) 2.251224229s ago: executing program 1 (id=41): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.031588849s ago: executing program 2 (id=42): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0xff, 0x13bc0000000}}, 0x28) 1.61852028s ago: executing program 2 (id=43): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) 1.287844453s ago: executing program 1 (id=44): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008040000b7030000e7e90633850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.158461096s ago: executing program 3 (id=45): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 953.734953ms ago: executing program 0 (id=46): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 948.300356ms ago: executing program 1 (id=47): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x2) 947.725874ms ago: executing program 3 (id=56): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000019580)="0c009920dbd93312dfd204", 0xb}, {0x0}], 0x2}}], 0x1, 0x20008004) 503.577446ms ago: executing program 0 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000f4000040"]) 503.387062ms ago: executing program 1 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 348.404985ms ago: executing program 4 (id=50): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 294.425579ms ago: executing program 1 (id=51): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x490, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x448, 0x2, [@TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9573, 0x1f7f, 0x8, 0x5, 0x7fff, 0x3, 0x7, 0x7, 0x9, 0x10000, 0x5, 0x2, 0xe6e, 0x9, 0x2, 0x7, 0x0, 0x3, 0x40, 0x9, 0xffffff80, 0x5c, 0x31, 0x8, 0xdaf, 0x1, 0x0, 0xffffffff, 0x0, 0x5, 0x3, 0xfffffffe, 0xd, 0x2, 0xfffffe00, 0x8001, 0x250b, 0x2, 0x3, 0x4, 0x3, 0x1, 0x131, 0x900000, 0x2, 0x7, 0x8000, 0x400, 0xf, 0x1, 0x40, 0x5f, 0xb1e, 0x3c, 0x9, 0x466c, 0x0, 0x3af0, 0x6f, 0x4, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x88, 0x9, 0xfff, 0x6, 0x1, 0x0, 0x9, 0x10, 0x1, 0xffffff7f, 0xffffffff, 0x7, 0x0, 0x2, 0x4, 0x6076fce6, 0xfffffffd, 0x62, 0x1, 0x7, 0xffffffff, 0xbb0, 0x3a, 0x2, 0x3, 0x428eec5d, 0x800, 0x1, 0x9, 0x4, 0x0, 0x5, 0x5, 0x3ff, 0xfffffeff, 0x5, 0x37, 0x0, 0x4, 0x30000, 0x200, 0x0, 0x8, 0x5, 0x0, 0x3, 0x2, 0x4, 0x8, 0x10001, 0xfffffffd, 0xadb5, 0x0, 0x101, 0x5, 0x2, 0x7, 0x8, 0x5, 0x0, 0xc, 0x6, 0x1000000, 0xc, 0x3, 0xd2, 0xffff, 0x9d2a, 0x3ff, 0x6, 0x10000, 0x2, 0x1, 0xfffffffe, 0x0, 0x4, 0x1b28e26a, 0x4, 0x7, 0xd, 0x7fff, 0x5, 0x8, 0x30f000, 0x1a, 0x2, 0x6, 0x0, 0x5, 0xb17, 0x3, 0x8, 0x467a, 0x7, 0x5, 0x1, 0x5, 0x5, 0x4, 0xde3, 0xbff, 0x3ff, 0xfffffffa, 0xfffffff9, 0xc92, 0x1000, 0x3, 0x3, 0x1, 0x2, 0x7, 0x7, 0x7f, 0x5, 0x9, 0x6, 0x1000, 0x100, 0x4, 0x5, 0x3, 0x898, 0x8, 0x4, 0xd4a2, 0x80000000, 0x3, 0x0, 0x1ff, 0xe9c, 0x40000000, 0x5, 0x9b19, 0x7ff, 0x402, 0x3, 0x3, 0x1, 0x4, 0xffffffff, 0x2, 0x8, 0x7, 0xfffffff7, 0x1, 0xa8d2, 0x4, 0xf, 0x6, 0x9, 0x7f, 0x0, 0x8, 0x0, 0x6, 0xebc, 0x486b, 0xfffffd72, 0x3, 0x2, 0x100, 0x379e58f3, 0x6, 0x2, 0xdb5, 0x2, 0xb, 0x10, 0x6, 0x3, 0x6, 0x6, 0x5, 0xf, 0x6, 0x1, 0x0, 0xb, 0xc9, 0xd4ef, 0xc, 0x6, 0x8, 0x5bd5, 0x80000000, 0x1ff, 0x100, 0x4907a859, 0x1c0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x20000000, 0xffffffc0, 0x0, 0xfff, {0x2f, 0x1, 0x5, 0x7ff, 0x5, 0x1}, {0x2, 0x1, 0x17b7, 0x4, 0x6, 0x81}, 0x9, 0x9, 0x7}}]}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 244.356126ms ago: executing program 3 (id=52): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=r2) 155.706027ms ago: executing program 2 (id=53): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x180, 0x1, [@m_simple={0x3c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e806000000dc493fe8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x104, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xd6, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b3697264083e1c85729597a3ff8fed60b904846b3"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x3c, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x5, 0x6, "df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 22.59654ms ago: executing program 1 (id=54): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000100)=0x9) 5.356044ms ago: executing program 0 (id=55): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000001, 0x71, 0x1}) pread64(r0, 0x0, 0x0, 0x1) 0s ago: executing program 3 (id=57): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) kernel console output (not intermixed with test programs): [ 92.547328][ T836] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 101.489483][ T5789] cgroup: Unknown subsys name 'net' [ 101.761188][ T5789] cgroup: Unknown subsys name 'cpuset' [ 101.854559][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 104.031231][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.196072][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.207163][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.209046][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.210462][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.234065][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.245365][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.249921][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.250767][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.291277][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.292326][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.340045][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.344854][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.346144][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.349113][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.355417][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.412823][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.437168][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.443065][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.459060][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.460317][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.489869][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.510043][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.521819][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.532673][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.542490][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.532666][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 108.682505][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 108.692824][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 108.917471][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 109.237270][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 109.336177][ T5807] Bluetooth: hci1: command tx timeout [ 109.336186][ T61] Bluetooth: hci0: command tx timeout [ 109.413967][ T61] Bluetooth: hci2: command tx timeout [ 109.463399][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.463517][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.465303][ T5803] bridge_slave_0: entered allmulticast mode [ 109.469790][ T5803] bridge_slave_0: entered promiscuous mode [ 109.494189][ T61] Bluetooth: hci3: command tx timeout [ 109.584035][ T61] Bluetooth: hci4: command tx timeout [ 109.639872][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.640020][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.640165][ T5803] bridge_slave_1: entered allmulticast mode [ 109.642110][ T5803] bridge_slave_1: entered promiscuous mode [ 109.926410][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.926553][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.926702][ T5810] bridge_slave_0: entered allmulticast mode [ 109.928759][ T5810] bridge_slave_0: entered promiscuous mode [ 109.931588][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.931739][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.932388][ T5805] bridge_slave_0: entered allmulticast mode [ 109.945817][ T5805] bridge_slave_0: entered promiscuous mode [ 110.184993][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.185152][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.185308][ T5810] bridge_slave_1: entered allmulticast mode [ 110.187391][ T5810] bridge_slave_1: entered promiscuous mode [ 110.189743][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.189891][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.190091][ T5805] bridge_slave_1: entered allmulticast mode [ 110.192113][ T5805] bridge_slave_1: entered promiscuous mode [ 110.218441][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.468897][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.469225][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.469346][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.469487][ T5812] bridge_slave_0: entered allmulticast mode [ 110.471511][ T5812] bridge_slave_0: entered promiscuous mode [ 110.756197][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.756391][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.756541][ T5812] bridge_slave_1: entered allmulticast mode [ 110.758628][ T5812] bridge_slave_1: entered promiscuous mode [ 110.828925][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.833103][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.037634][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.040614][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.040983][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.041101][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.041253][ T5815] bridge_slave_0: entered allmulticast mode [ 111.043286][ T5815] bridge_slave_0: entered promiscuous mode [ 111.052043][ T5803] team0: Port device team_slave_0 added [ 111.275013][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.275171][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.275315][ T5815] bridge_slave_1: entered allmulticast mode [ 111.277465][ T5815] bridge_slave_1: entered promiscuous mode [ 111.280858][ T5803] team0: Port device team_slave_1 added [ 111.287640][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.413985][ T61] Bluetooth: hci0: command tx timeout [ 111.414035][ T61] Bluetooth: hci1: command tx timeout [ 111.494044][ T5807] Bluetooth: hci2: command tx timeout [ 111.574071][ T5807] Bluetooth: hci3: command tx timeout [ 111.638930][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.641050][ T5810] team0: Port device team_slave_0 added [ 111.646712][ T5805] team0: Port device team_slave_0 added [ 111.654318][ T5807] Bluetooth: hci4: command tx timeout [ 111.927100][ T5810] team0: Port device team_slave_1 added [ 111.929782][ T5805] team0: Port device team_slave_1 added [ 111.934655][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.176408][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.176422][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.176444][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.427643][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.429109][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.429126][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.429156][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.435888][ T5812] team0: Port device team_slave_0 added [ 112.697774][ T5812] team0: Port device team_slave_1 added [ 112.699109][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.699130][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.699153][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.700652][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.700667][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.700699][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.876671][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.876688][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.876710][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.877927][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.877943][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.877964][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.880278][ T5815] team0: Port device team_slave_0 added [ 113.057209][ T5815] team0: Port device team_slave_1 added [ 113.058333][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.058346][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.058367][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.325585][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.325607][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.325627][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.341626][ T5803] hsr_slave_0: entered promiscuous mode [ 113.345250][ T5803] hsr_slave_1: entered promiscuous mode [ 113.495291][ T5807] Bluetooth: hci0: command tx timeout [ 113.495331][ T5807] Bluetooth: hci1: command tx timeout [ 113.574039][ T61] Bluetooth: hci2: command tx timeout [ 113.589278][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.589302][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.589338][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.653973][ T61] Bluetooth: hci3: command tx timeout [ 113.726671][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.726686][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.726707][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.737036][ T5810] hsr_slave_0: entered promiscuous mode [ 113.738834][ T5810] hsr_slave_1: entered promiscuous mode [ 113.740172][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 113.740331][ T5810] Cannot create hsr debugfs directory [ 113.743988][ T61] Bluetooth: hci4: command tx timeout [ 113.822815][ T5805] hsr_slave_0: entered promiscuous mode [ 113.829863][ T5805] hsr_slave_1: entered promiscuous mode [ 113.830753][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 113.830779][ T5805] Cannot create hsr debugfs directory [ 114.163512][ T5812] hsr_slave_0: entered promiscuous mode [ 114.166149][ T5812] hsr_slave_1: entered promiscuous mode [ 114.167678][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 114.167715][ T5812] Cannot create hsr debugfs directory [ 114.791370][ T5815] hsr_slave_0: entered promiscuous mode [ 114.792355][ T5815] hsr_slave_1: entered promiscuous mode [ 114.793088][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 114.793108][ T5815] Cannot create hsr debugfs directory [ 115.574139][ T61] Bluetooth: hci1: command tx timeout [ 115.574183][ T61] Bluetooth: hci0: command tx timeout [ 115.654109][ T61] Bluetooth: hci2: command tx timeout [ 115.734652][ T61] Bluetooth: hci3: command tx timeout [ 115.813871][ T61] Bluetooth: hci4: command tx timeout [ 116.181192][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.225006][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.268991][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.318078][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.461234][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.503404][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.552518][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.607934][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.761959][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.800654][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.832122][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.881112][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.058409][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.113597][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.151290][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.200187][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.301600][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.389745][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.432632][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.477692][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.518300][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.556513][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.599714][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.600606][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.643064][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.643241][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.671958][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.787982][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.809841][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.839573][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.839738][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.881989][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.882156][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.943290][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.999254][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.999500][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.029736][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.060496][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.060723][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.168350][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.191070][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.227219][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.227466][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.288888][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.289077][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.389251][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.445924][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.446095][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.519300][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.519505][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.567770][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.901426][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.083066][ T5803] veth0_vlan: entered promiscuous mode [ 119.133268][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.190966][ T5803] veth1_vlan: entered promiscuous mode [ 119.305931][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.324730][ T5810] veth0_vlan: entered promiscuous mode [ 119.380084][ T5810] veth1_vlan: entered promiscuous mode [ 119.412826][ T5803] veth0_macvtap: entered promiscuous mode [ 119.473342][ T5805] veth0_vlan: entered promiscuous mode [ 119.480247][ T5803] veth1_macvtap: entered promiscuous mode [ 119.502950][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.559329][ T5805] veth1_vlan: entered promiscuous mode [ 119.628633][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.672485][ T5812] veth0_vlan: entered promiscuous mode [ 119.685569][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.687728][ T5810] veth0_macvtap: entered promiscuous mode [ 119.737678][ T5810] veth1_macvtap: entered promiscuous mode [ 119.745212][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.757238][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.763565][ T5812] veth1_vlan: entered promiscuous mode [ 119.767466][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.789436][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.929223][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.930984][ T5805] veth0_macvtap: entered promiscuous mode [ 120.042766][ T5805] veth1_macvtap: entered promiscuous mode [ 120.048588][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.119403][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.131710][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.161332][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.180786][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.196492][ T5812] veth0_macvtap: entered promiscuous mode [ 120.207686][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.220137][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.220162][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.257306][ T5812] veth1_macvtap: entered promiscuous mode [ 120.313334][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.431626][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.442378][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.492225][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.492250][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.510089][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.539056][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.560875][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.642165][ T5815] veth0_vlan: entered promiscuous mode [ 120.699051][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.724068][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.724092][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.828795][ T3577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.832556][ T5815] veth1_vlan: entered promiscuous mode [ 120.860451][ T3577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.975524][ T3577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.991684][ T3577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.149973][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.149998][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.282377][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.282401][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.531515][ T5926] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.533494][ T5926] Zero length message leads to an empty skb [ 121.546931][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.546959][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.555325][ T5815] veth0_macvtap: entered promiscuous mode [ 121.704510][ T5815] veth1_macvtap: entered promiscuous mode [ 121.769089][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.769125][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.928741][ T5930] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 122.049435][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.077362][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.077387][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.100145][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.266824][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.279953][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.283232][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.321563][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.373027][ T5932] syz.0.10 (5932) used greatest stack depth: 17480 bytes left [ 122.629566][ T5945] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 122.629566][ T5945] The task syz.1.13 (5945) triggered the difference, watch for misbehavior. [ 122.923020][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.923047][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.201202][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.201226][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.625552][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.725958][ T5982] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 124.728800][ T5979] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 124.728845][ T5979] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 125.241010][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 125.567145][ T5992] nbd0: detected capacity change from 0 to 127 [ 125.570883][ T61] block nbd0: Receive control failed (result -32) [ 125.706409][ T5999] tap0: tun_chr_ioctl cmd 1074025677 [ 125.706872][ T5999] tap0: linktype set to 0 [ 125.717870][ T5816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.933802][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 125.993168][ T5816] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.993201][ T5816] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.993228][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.026140][ T5816] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 126.026176][ T5816] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 126.026196][ T5816] usb 1-1: Product: syz [ 126.026211][ T5816] usb 1-1: Manufacturer: syz [ 126.026226][ T5816] usb 1-1: SerialNumber: syz [ 126.029249][ T6007] process 'syz.4.37' launched './file0' with NULL argv: empty string added [ 126.090837][ T5816] usb 1-1: config 0 descriptor?? [ 126.207568][ T5957] block nbd0: Dead connection, failed to find a fallback [ 126.207599][ T5957] block nbd0: shutting down sockets [ 126.207695][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.207818][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.208270][ T5957] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.208298][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 126.208507][ T5957] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.208535][ T5957] Buffer I/O error on dev nbd0, logical block 2, async page read [ 126.208715][ T5957] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.208741][ T5957] Buffer I/O error on dev nbd0, logical block 3, async page read [ 126.208927][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.208954][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.209128][ T5957] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.209156][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 126.209320][ T5957] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.209347][ T5957] Buffer I/O error on dev nbd0, logical block 2, async page read [ 126.209518][ T5957] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.209550][ T5957] Buffer I/O error on dev nbd0, logical block 3, async page read [ 126.209837][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.209964][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.210231][ T5957] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.210263][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 126.447866][ T5957] ldm_validate_partition_table(): Disk read failed. [ 126.451021][ T5957] Dev nbd0: unable to read RDB block 0 [ 126.496906][ T5957] nbd0: unable to read partition table [ 126.718520][ T5957] ldm_validate_partition_table(): Disk read failed. [ 126.720747][ T5957] Dev nbd0: unable to read RDB block 0 [ 126.777564][ T5957] nbd0: unable to read partition table [ 126.838623][ T5816] gs_usb 1-1:0.0: Configuring for 217 interfaces [ 127.067791][ T5816] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 127.149510][ T5816] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 127.365409][ T5816] usb 1-1: USB disconnect, device number 2 [ 127.404831][ T50] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 127.609797][ T50] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 127.609863][ T50] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 127.609893][ T50] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 127.609922][ T50] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.609959][ T50] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 127.609982][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.768335][ T6011] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.883175][ T50] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.901298][ T50] usb 5-1: invalid MIDI out EP 0 [ 128.225391][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.501722][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.592205][ T50] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 128.718695][ T50] usb 5-1: USB disconnect, device number 2 [ 129.095521][ T1020] ------------[ cut here ]------------ [ 129.095544][ T1020] WARNING: CPU: 0 PID: 1020 at kernel/kcov.c:872 kcov_remote_start+0x5d9/0x6f0 [ 129.095602][ T1020] Modules linked in: [ 129.095649][ T1020] CPU: 0 UID: 0 PID: 1020 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.095676][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.095694][ T1020] Workqueue: events_unbound cfg80211_wiphy_work [ 129.095736][ T1020] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 129.095773][ T1020] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 93 ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 39 ab 01 09 89 c0 48 c7 c7 b8 fb a2 [ 129.095795][ T1020] RSP: 0000:ffffc9000464f958 EFLAGS: 00010202 [ 129.095815][ T1020] RAX: 0000000000000002 RBX: ffff888025323c00 RCX: 0000000000000000 [ 129.095832][ T1020] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: ffffffff8b3ddd00 [ 129.095850][ T1020] RBP: ffff888027a033c0 R08: 0000000000000000 R09: ffffffff8ac2ab41 [ 129.095867][ T1020] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff88805c015d08 [ 129.095886][ T1020] R13: ffff88805c3e07c0 R14: 0000000000000000 R15: ffff88805c015d20 [ 129.095904][ T1020] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 129.095924][ T1020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.095941][ T1020] CR2: 00007fb5cd005713 CR3: 00000000368da000 CR4: 00000000003526f0 [ 129.095964][ T1020] Call Trace: [ 129.095980][ T1020] [ 129.095999][ T1020] ieee80211_iface_work+0x211/0x12d0 [ 129.096049][ T1020] cfg80211_wiphy_work+0x2bb/0x470 [ 129.096085][ T1020] ? process_scheduled_works+0x9ef/0x17b0 [ 129.096121][ T1020] process_scheduled_works+0xae1/0x17b0 [ 129.096217][ T1020] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.096276][ T1020] worker_thread+0x8a0/0xda0 [ 129.096317][ T1020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.096368][ T1020] ? __kthread_parkme+0x7b/0x200 [ 129.096418][ T1020] kthread+0x711/0x8a0 [ 129.096464][ T1020] ? __pfx_worker_thread+0x10/0x10 [ 129.096497][ T1020] ? __pfx_kthread+0x10/0x10 [ 129.096534][ T1020] ? rt_spin_unlock+0x150/0x200 [ 129.096569][ T1020] ? rt_spin_unlock+0x161/0x200 [ 129.096595][ T1020] ? __pfx_kthread+0x10/0x10 [ 129.096637][ T1020] ret_from_fork+0x4bc/0x870 [ 129.096674][ T1020] ? __pfx_ret_from_fork+0x10/0x10 [ 129.096717][ T1020] ? __switch_to_asm+0x39/0x70 [ 129.096744][ T1020] ? __switch_to_asm+0x33/0x70 [ 129.096769][ T1020] ? __pfx_kthread+0x10/0x10 [ 129.096812][ T1020] ret_from_fork_asm+0x1a/0x30 [ 129.096864][ T1020] [ 129.096878][ T1020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.096897][ T1020] CPU: 0 UID: 0 PID: 1020 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.096926][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.096942][ T1020] Workqueue: events_unbound cfg80211_wiphy_work [ 129.096978][ T1020] Call Trace: [ 129.096989][ T1020] [ 129.096999][ T1020] dump_stack_lvl+0x99/0x250 [ 129.097040][ T1020] ? __asan_memcpy+0x40/0x70 [ 129.097073][ T1020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.097114][ T1020] ? __pfx__printk+0x10/0x10 [ 129.097173][ T1020] vpanic+0x237/0x6d0 [ 129.097200][ T1020] ? __pfx_vpanic+0x10/0x10 [ 129.097241][ T1020] panic+0xb9/0xc0 [ 129.097266][ T1020] ? __pfx_panic+0x10/0x10 [ 129.097316][ T1020] __warn+0x31b/0x4b0 [ 129.097341][ T1020] ? kcov_remote_start+0x5d9/0x6f0 [ 129.097382][ T1020] ? kcov_remote_start+0x5d9/0x6f0 [ 129.097419][ T1020] report_bug+0x2be/0x4f0 [ 129.097454][ T1020] ? kcov_remote_start+0x5d9/0x6f0 [ 129.097491][ T1020] ? kcov_remote_start+0x5d9/0x6f0 [ 129.097528][ T1020] ? kcov_remote_start+0x5db/0x6f0 [ 129.097564][ T1020] handle_bug+0x84/0x160 [ 129.097607][ T1020] exc_invalid_op+0x1a/0x50 [ 129.097648][ T1020] asm_exc_invalid_op+0x1a/0x20 [ 129.097673][ T1020] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 129.097710][ T1020] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 93 ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 39 ab 01 09 89 c0 48 c7 c7 b8 fb a2 [ 129.097732][ T1020] RSP: 0000:ffffc9000464f958 EFLAGS: 00010202 [ 129.097754][ T1020] RAX: 0000000000000002 RBX: ffff888025323c00 RCX: 0000000000000000 [ 129.097772][ T1020] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: ffffffff8b3ddd00 [ 129.097790][ T1020] RBP: ffff888027a033c0 R08: 0000000000000000 R09: ffffffff8ac2ab41 [ 129.097808][ T1020] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff88805c015d08 [ 129.097828][ T1020] R13: ffff88805c3e07c0 R14: 0000000000000000 R15: ffff88805c015d20 [ 129.097856][ T1020] ? rt_spin_lock+0x1c1/0x3e0 [ 129.097897][ T1020] ? kcov_remote_start+0xe1/0x6f0 [ 129.097937][ T1020] ieee80211_iface_work+0x211/0x12d0 [ 129.097987][ T1020] cfg80211_wiphy_work+0x2bb/0x470 [ 129.098023][ T1020] ? process_scheduled_works+0x9ef/0x17b0 [ 129.098060][ T1020] process_scheduled_works+0xae1/0x17b0 [ 129.098165][ T1020] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.098225][ T1020] worker_thread+0x8a0/0xda0 [ 129.098264][ T1020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.098314][ T1020] ? __kthread_parkme+0x7b/0x200 [ 129.098365][ T1020] kthread+0x711/0x8a0 [ 129.098410][ T1020] ? __pfx_worker_thread+0x10/0x10 [ 129.098444][ T1020] ? __pfx_kthread+0x10/0x10 [ 129.098481][ T1020] ? rt_spin_unlock+0x150/0x200 [ 129.098516][ T1020] ? rt_spin_unlock+0x161/0x200 [ 129.098543][ T1020] ? __pfx_kthread+0x10/0x10 [ 129.098586][ T1020] ret_from_fork+0x4bc/0x870 [ 129.098623][ T1020] ? __pfx_ret_from_fork+0x10/0x10 [ 129.098667][ T1020] ? __switch_to_asm+0x39/0x70 [ 129.098693][ T1020] ? __switch_to_asm+0x33/0x70 [ 129.098718][ T1020] ? __pfx_kthread+0x10/0x10 [ 129.098760][ T1020] ret_from_fork_asm+0x1a/0x30 [ 129.098814][ T1020] [ 129.099126][ T1020] Kernel Offset: disabled