last executing test programs: 20.577426176s ago: executing program 2 (id=373): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f00000001c0)='virtiofs\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') 18.797788907s ago: executing program 2 (id=378): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 15.398494977s ago: executing program 2 (id=382): io_setup(0x10000, &(0x7f0000000800)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) 9.843388341s ago: executing program 2 (id=392): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x2, &(0x7f0000000380)="9bc6", 0x5}) 9.164018475s ago: executing program 2 (id=395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400"/491], 0x258) close(0xffffffffffffffff) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x3, 0x9, &(0x7f00000001c0)=0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) 8.120621081s ago: executing program 1 (id=396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x1b000, 0x7fffffffffffffff}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2022}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf58}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) 7.766492733s ago: executing program 1 (id=397): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") futex(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(r4, r5, 0x0, 0x80000000) 6.465344581s ago: executing program 0 (id=398): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x8000480) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5d6, &(0x7f0000000600)="$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") 6.399853152s ago: executing program 3 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800003fb4fca772d790", @ANYRES16, @ANYBLOB="00000000f5000000b708000002808058155e31cfa29614df2911f2034b7299b90b073f772464d1ca58510c6f4f3f84b1b2c11b1e95a8a6b8b0312b21e0e2660016de90c5db09c68f9cb96c623189ff6d19fbfd6a80eb5e96ee715dfbeba238ae785360418c986f6ebdc0d39e4aab219062a0244f2a76aebc65d93a89c0867f9842253a1d068959", @ANYRES64], 0x0, 0xa4b8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 5.738856806s ago: executing program 0 (id=400): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x88) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) socket$nl_generic(0x10, 0x3, 0x10) 5.333356438s ago: executing program 1 (id=401): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') lseek(r1, 0x10000000005, 0x0) sched_setattr(0x0, &(0x7f0000001940)={0x38, 0x0, 0x10, 0x3, 0x0, 0x1, 0x800075b, 0x0, 0x11000, 0x9}, 0x0) 5.147300049s ago: executing program 3 (id=402): r0 = gettid() tkill(r0, 0x12) prlimit64(r0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x620201) socket$alg(0x26, 0x5, 0x0) 4.393286154s ago: executing program 1 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000300)) unshare(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 4.380236744s ago: executing program 3 (id=404): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100001a00ffff2abd7000030001000a01010100000000000000000000000000000000000000000000000000000001000000004e240000000020a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d46c000000fc010000000000000000010000000000000000000100000000000000000000000000000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff0000000000000000400000000000000000000000000000000100000000000000a6000000000000006d930000493d00000040000000000000032500000a0000046000000000000000480003006465666c61746500"/189], 0x138}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/7, 0x7) 2.752055053s ago: executing program 3 (id=405): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 2.612002804s ago: executing program 0 (id=406): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000017c0)=""/4077, &(0x7f0000000100)=0xfed) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001080), 0x3454, 0xd1a1e6b71d36d5c5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001780)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2400d800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 2.592476864s ago: executing program 1 (id=407): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x5, 0x5, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x8000, 0x40, 0xf741}}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) 1.536551921s ago: executing program 1 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x818) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x67e09000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x7, 0x2, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x7, 0x40000003, 0x89, 0xd, 0x20f27, 0xffff, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.536356731s ago: executing program 3 (id=409): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x8000480) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5d6, &(0x7f0000000600)="$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") 1.395564122s ago: executing program 0 (id=410): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 1.244120203s ago: executing program 0 (id=411): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f00000001c0)='virtiofs\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') 371.097838ms ago: executing program 2 (id=412): r0 = gettid() tkill(r0, 0x12) prlimit64(r0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x620201) socket$alg(0x26, 0x5, 0x0) 288.276249ms ago: executing program 3 (id=413): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100001a00ffff2abd7000030001000a01010100000000000000000000000000000000000000000000000000000001000000004e240000000020a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d46c000000fc010000000000000000010000000000000000000100000000000000000000000000000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff0000000000000000400000000000000000000000000000000100000000000000a6000000000000006d930000493d00000040000000000000032500000a0000046000000000000000480003006465666c61746500"/189], 0x138}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/7, 0x7) 0s ago: executing program 0 (id=414): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x88) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 81.202258][ T5779] cgroup: Unknown subsys name 'net' [ 81.342295][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.240490][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.548309][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.557235][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.568808][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.576804][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.584637][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.592929][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.600945][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.608084][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.608435][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.618114][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.624844][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.634036][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.646960][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.656110][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.664130][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.664298][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.679618][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.688222][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.698246][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.713641][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.721989][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.730803][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.738701][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.746190][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.314093][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.411066][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 86.422169][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 86.510770][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.591806][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.599304][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.607224][ T5790] bridge_slave_0: entered allmulticast mode [ 86.614976][ T5790] bridge_slave_0: entered promiscuous mode [ 86.654274][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.661516][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.669655][ T5790] bridge_slave_1: entered allmulticast mode [ 86.676869][ T5790] bridge_slave_1: entered promiscuous mode [ 86.742654][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.750207][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.757811][ T5794] bridge_slave_0: entered allmulticast mode [ 86.765007][ T5794] bridge_slave_0: entered promiscuous mode [ 86.773183][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.780399][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.788418][ T5794] bridge_slave_1: entered allmulticast mode [ 86.796596][ T5794] bridge_slave_1: entered promiscuous mode [ 86.816791][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.824041][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.831273][ T5791] bridge_slave_0: entered allmulticast mode [ 86.838552][ T5791] bridge_slave_0: entered promiscuous mode [ 86.856292][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.869717][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.907886][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.915526][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.924125][ T5791] bridge_slave_1: entered allmulticast mode [ 86.931183][ T5791] bridge_slave_1: entered promiscuous mode [ 86.977869][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.026810][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.034385][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.041829][ T5789] bridge_slave_0: entered allmulticast mode [ 87.049180][ T5789] bridge_slave_0: entered promiscuous mode [ 87.060422][ T5790] team0: Port device team_slave_0 added [ 87.069336][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.092636][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.106022][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.115681][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.122883][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.130579][ T5789] bridge_slave_1: entered allmulticast mode [ 87.138431][ T5789] bridge_slave_1: entered promiscuous mode [ 87.162225][ T5790] team0: Port device team_slave_1 added [ 87.198033][ T5794] team0: Port device team_slave_0 added [ 87.264619][ T5794] team0: Port device team_slave_1 added [ 87.271564][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.278831][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.305260][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.322305][ T5791] team0: Port device team_slave_0 added [ 87.331024][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.353707][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.360699][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.387028][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.408428][ T5791] team0: Port device team_slave_1 added [ 87.417343][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.452559][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.459659][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.486032][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.542381][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.549495][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.575642][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.587436][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.594783][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.620818][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.649357][ T5789] team0: Port device team_slave_0 added [ 87.659672][ T5789] team0: Port device team_slave_1 added [ 87.684003][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.691024][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.714341][ T5798] Bluetooth: hci0: command tx timeout [ 87.718273][ T5795] Bluetooth: hci2: command tx timeout [ 87.728744][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.760872][ T5790] hsr_slave_0: entered promiscuous mode [ 87.767929][ T5790] hsr_slave_1: entered promiscuous mode [ 87.793160][ T5795] Bluetooth: hci1: command tx timeout [ 87.794311][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.806591][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.832725][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.877501][ T5795] Bluetooth: hci3: command tx timeout [ 87.877674][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.890185][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.916364][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.967966][ T5794] hsr_slave_0: entered promiscuous mode [ 87.975307][ T5794] hsr_slave_1: entered promiscuous mode [ 87.981591][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.989779][ T5794] Cannot create hsr debugfs directory [ 88.039815][ T5791] hsr_slave_0: entered promiscuous mode [ 88.046958][ T5791] hsr_slave_1: entered promiscuous mode [ 88.054554][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.062153][ T5791] Cannot create hsr debugfs directory [ 88.140871][ T5789] hsr_slave_0: entered promiscuous mode [ 88.147540][ T5789] hsr_slave_1: entered promiscuous mode [ 88.154594][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.162196][ T5789] Cannot create hsr debugfs directory [ 88.520302][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.556795][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.568831][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.588540][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.645489][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.666788][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.678069][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.695953][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.767623][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.782209][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.804014][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.817405][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.909165][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.920990][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.932629][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.945004][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.117297][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.139312][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.168025][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.211820][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.230685][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.238238][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.264478][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.277917][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.300861][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.308114][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.319232][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.326408][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.358042][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.365301][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.384513][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.401209][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.420435][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.427651][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.457471][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.464697][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.478743][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.485931][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.526179][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.533424][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.559855][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.600341][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.719827][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.794367][ T5795] Bluetooth: hci2: command tx timeout [ 89.799864][ T5795] Bluetooth: hci0: command tx timeout [ 89.873221][ T5795] Bluetooth: hci1: command tx timeout [ 89.958103][ T5795] Bluetooth: hci3: command tx timeout [ 90.068494][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.221405][ T5791] veth0_vlan: entered promiscuous mode [ 90.252164][ T5791] veth1_vlan: entered promiscuous mode [ 90.268914][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.318802][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.347593][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.376810][ T5791] veth0_macvtap: entered promiscuous mode [ 90.417057][ T5791] veth1_macvtap: entered promiscuous mode [ 90.441137][ T5790] veth0_vlan: entered promiscuous mode [ 90.479279][ T5790] veth1_vlan: entered promiscuous mode [ 90.506214][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.516175][ T5794] veth0_vlan: entered promiscuous mode [ 90.536344][ T5789] veth0_vlan: entered promiscuous mode [ 90.559783][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.576232][ T5794] veth1_vlan: entered promiscuous mode [ 90.585627][ T5789] veth1_vlan: entered promiscuous mode [ 90.610954][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.620235][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.629536][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639016][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.700445][ T5790] veth0_macvtap: entered promiscuous mode [ 90.735886][ T5790] veth1_macvtap: entered promiscuous mode [ 90.780080][ T5789] veth0_macvtap: entered promiscuous mode [ 90.825831][ T5789] veth1_macvtap: entered promiscuous mode [ 90.847248][ T5794] veth0_macvtap: entered promiscuous mode [ 90.857993][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.865983][ T5794] veth1_macvtap: entered promiscuous mode [ 90.879260][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.916287][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.925400][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.925942][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.941169][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.957359][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.972684][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.984101][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.994510][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.005378][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.017769][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.030764][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.041598][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.053428][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.062490][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.074869][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.085146][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.097833][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.109223][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.126617][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.136500][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.145657][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.155057][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.178254][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.188422][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.197456][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.207662][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.282945][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.316674][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333590][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.353304][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.373109][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.385316][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.398966][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.411314][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.424716][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.435574][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.446225][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.456151][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.467810][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.481769][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.626272][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.652174][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664255][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.673581][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.699307][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.716865][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.761829][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.786998][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.873262][ T5795] Bluetooth: hci2: command tx timeout [ 91.878833][ T5795] Bluetooth: hci0: command tx timeout [ 91.956769][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.967198][ T5795] Bluetooth: hci1: command tx timeout [ 92.021053][ T5887] netlink: 'syz.2.5': attribute type 11 has an invalid length. [ 92.047600][ T5795] Bluetooth: hci3: command tx timeout [ 92.078172][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.336403][ T9] cfg80211: failed to load regulatory.db [ 92.690135][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.740860][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.424464][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.432642][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.475430][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.592106][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055065][ T5795] Bluetooth: hci0: command tx timeout [ 94.060783][ T5795] Bluetooth: hci2: command tx timeout [ 94.113690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.205731][ T5795] Bluetooth: hci1: command tx timeout [ 94.211507][ T5795] Bluetooth: hci3: command tx timeout [ 96.233434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.252266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.260961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.811027][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.270690][ T5917] delete_channel: no stack [ 98.152277][ T5905] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.273298][ T5929] netlink: 'syz.0.12': attribute type 11 has an invalid length. [ 99.182063][ T5905] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.193883][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.228971][ T5905] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.273130][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.287363][ T5905] usb 4-1: Product: syz [ 99.300294][ T5905] usb 4-1: Manufacturer: syz [ 99.311725][ T5905] usb 4-1: SerialNumber: syz [ 99.328942][ T5905] usb 4-1: config 0 descriptor?? [ 99.367927][ T5905] usb 4-1: selecting invalid altsetting 0 [ 99.513538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.677333][ T5879] usb 4-1: USB disconnect, device number 2 [ 99.734366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.764118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.143211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 100.152699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.203481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.486333][ T5959] fuse: Unknown parameter '0x0000000000000003' [ 102.176547][ T5965] netlink: 'syz.3.25': attribute type 11 has an invalid length. [ 103.934984][ T5984] fuse: Unknown parameter '0x0000000000000003' [ 104.078877][ T5986] overlayfs: failed to resolve './file1': -2 [ 104.133097][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.151762][ T5974] syz.2.28[5974]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.291015][ T5974] loop2: detected capacity change from 0 to 2048 [ 104.339926][ T5992] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 104.345544][ T5905] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.397245][ T5974] Alternate GPT is invalid, using primary GPT. [ 104.451723][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.502557][ T5974] loop2: p1 p2 p3 [ 104.525211][ T5905] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.567777][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.583529][ T5905] usb 4-1: Product: syz [ 104.596718][ T5905] usb 4-1: Manufacturer: syz [ 104.610380][ T5905] usb 4-1: SerialNumber: syz [ 104.639878][ T5905] usb 4-1: config 0 descriptor?? [ 104.671107][ T5161] Alternate GPT is invalid, using primary GPT. [ 104.680686][ T5905] usb 4-1: selecting invalid altsetting 0 [ 104.691523][ T5161] loop2: p1 p2 p3 [ 105.064169][ T5905] usb 4-1: USB disconnect, device number 3 [ 105.149339][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.968656][ T6018] fuse: Unknown parameter '0x0000000000000003' [ 108.453231][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.645283][ T5905] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 108.674703][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.697306][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.714798][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.727576][ T5905] usb 3-1: Product: syz [ 108.733358][ T5905] usb 3-1: Manufacturer: syz [ 108.738713][ T5905] usb 3-1: SerialNumber: syz [ 108.755270][ T5905] usb 3-1: config 0 descriptor?? [ 108.787955][ T5905] usb 3-1: selecting invalid altsetting 0 [ 109.525586][ T8] usb 3-1: USB disconnect, device number 2 [ 109.638819][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.184727][ T6035] comedi: valid board names for 8255 driver are: [ 111.191284][ T6035] 8255 [ 111.195073][ T6035] comedi: valid board names for vmk80xx driver are: [ 111.201683][ T6035] vmk80xx [ 111.215877][ T6035] comedi: valid board names for usbduxsigma driver are: [ 111.222852][ T6035] usbduxsigma [ 111.262289][ T6035] comedi: valid board names for usbduxfast driver are: [ 111.271358][ T6035] usbduxfast [ 111.279686][ T6035] comedi: valid board names for usbdux driver are: [ 111.289593][ T6035] usbdux [ 111.292564][ T6035] comedi: valid board names for ni6501 driver are: [ 111.299603][ T6035] ni6501 [ 111.302761][ T6035] comedi: valid board names for dt9812 driver are: [ 111.311072][ T6035] dt9812 [ 111.314769][ T6035] comedi: valid board names for ni_labpc_cs driver are: [ 111.323825][ T6035] ni_labpc_cs [ 111.327571][ T6035] comedi: valid board names for ni_daq_700 driver are: [ 111.335105][ T6035] ni_daq_700 [ 111.338650][ T6035] comedi: valid board names for labpc_pci driver are: [ 111.347133][ T6035] labpc_pci [ 111.350601][ T6035] comedi: valid board names for adl_pci9118 driver are: [ 111.356686][ T6040] fuse: Unknown parameter 'fd0x0000000000000003' [ 111.359728][ T6035] pci9118dg [ 111.433213][ T6035] pci9118hg [ 111.439732][ T6035] pci9118hr [ 111.461763][ T6035] comedi: valid board names for 8255_pci driver are: [ 111.489866][ T6035] 8255_pci [ 111.513270][ T6035] comedi: valid board names for s526 driver are: [ 111.536853][ T6035] s526 [ 111.549535][ T6035] comedi: valid board names for multiq3 driver are: [ 111.566814][ T6035] multiq3 [ 111.576961][ T6035] comedi: valid board names for pcmuio driver are: [ 111.620005][ T6035] pcmuio48 [ 111.648017][ T6035] pcmuio96 [ 111.659110][ T6035] comedi: valid board names for pcmmio driver are: [ 111.700684][ T6035] pcmmio [ 111.720513][ T6035] comedi: valid board names for pcmda12 driver are: [ 111.740839][ T6035] pcmda12 [ 111.750033][ T6035] comedi: valid board names for pcmad driver are: [ 111.771982][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 111.782842][ T6035] pcmad12 [ 111.789904][ T6035] pcmad16 [ 111.795264][ T6035] comedi: valid board names for ni_labpc driver are: [ 111.829411][ T6035] lab-pc-1200 [ 111.851406][ T6035] lab-pc-1200ai [ 111.861569][ T6035] lab-pc+ [ 111.871694][ T6035] comedi: valid board names for atmio16 driver are: [ 111.908213][ T6035] atmio16 [ 111.928764][ T6035] atmio16d [ 111.942256][ T6035] comedi: valid board names for ni_at_ao driver are: [ 112.022171][ T6035] at-ao-6 [ 112.046659][ T6035] at-ao-10 [ 112.060133][ T6035] comedi: valid board names for ni_at_a2150 driver are: [ 112.098341][ T6035] ni_at_a2150 [ 112.112513][ T6035] comedi: valid board names for adq12b driver are: [ 112.148063][ T6035] adq12b [ 112.366725][ T6035] comedi: valid board names for mpc624 driver are: [ 112.373820][ T6035] mpc624 [ 112.383296][ T6035] comedi: valid board names for c6xdigio driver are: [ 112.393232][ T6035] c6xdigio [ 112.401103][ T6035] comedi: valid board names for aio_iiro_16 driver are: [ 112.443120][ T6035] aio_iiro_16 [ 112.453450][ T6035] comedi: valid board names for aio_aio12_8 driver are: [ 112.543187][ T6035] aio_aio12_8 [ 112.563196][ T6035] aio_ai12_8 [ 112.576967][ T6035] aio_ao12_4 [ 112.580422][ T6035] comedi: valid board names for fl512 driver are: [ 112.603649][ T6035] fl512 [ 112.606699][ T6035] comedi: valid board names for dmm32at driver are: [ 112.623302][ T6035] dmm32at [ 112.627676][ T6035] comedi: valid board names for dt282x driver are: [ 112.639720][ T6035] dt2821 [ 112.642736][ T6035] dt2821-f [ 112.651409][ T6035] dt2821-g [ 112.658194][ T6035] dt2823 [ 112.661200][ T6035] dt2824-pgh [ 112.664651][ T6035] dt2824-pgl [ 112.668518][ T6035] dt2825 [ 112.671490][ T6035] dt2827 [ 112.688831][ T6035] dt2828 [ 112.691857][ T6035] dt2829 [ 112.736423][ T6035] dt21-ez [ 112.740319][ T6035] dt23-ez [ 112.779465][ T6035] dt24-ez [ 112.782579][ T6035] dt24-ez-pgl [ 112.801239][ T6035] comedi: valid board names for dt2817 driver are: [ 112.819331][ T6035] dt2817 [ 112.822536][ T6035] comedi: valid board names for dt2815 driver are: [ 112.830179][ T6035] dt2815 [ 112.838520][ T6035] comedi: valid board names for dt2814 driver are: [ 112.847805][ T6035] dt2814 [ 112.850808][ T6035] comedi: valid board names for dt2811 driver are: [ 112.867518][ T6035] dt2811-pgh [ 112.871204][ T6035] dt2811-pgl [ 112.876313][ T6035] comedi: valid board names for dt2801 driver are: [ 112.882887][ T6035] dt2801 [ 112.886021][ T6035] comedi: valid board names for das6402 driver are: [ 112.893794][ T6035] das6402-12 [ 112.898975][ T6035] das6402-16 [ 112.902379][ T6035] comedi: valid board names for das1800 driver are: [ 112.909253][ T6035] das-1701st [ 112.912678][ T6035] das-1701st-da [ 112.916687][ T6035] das-1702st [ 112.920106][ T6035] das-1702st-da [ 112.923833][ T6035] das-1702hr [ 112.927286][ T6035] das-1702hr-da [ 112.931092][ T6035] das-1701ao [ 112.933181][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.934536][ T6035] das-1702ao [ 113.718994][ T6035] das-1801st [ 113.722404][ T6035] das-1801st-da [ 113.727998][ T6035] das-1802st [ 113.731385][ T6035] das-1802st-da [ 113.745645][ T6035] das-1802hr [ 113.749032][ T6035] das-1802hr-da [ 113.752684][ T6035] das-1801hc [ 113.756918][ T6035] das-1802hc [ 113.767844][ T6035] das-1801ao [ 113.771212][ T6035] das-1802ao [ 113.775236][ T6035] comedi: valid board names for das800 driver are: [ 113.798652][ T6035] das-800 [ 113.801722][ T6035] cio-das800 [ 113.810065][ T6035] das-801 [ 113.829314][ T6035] cio-das801 [ 113.832700][ T6035] das-802 [ 113.836560][ T6035] cio-das802 [ 113.848729][ T6035] cio-das802/16 [ 113.862371][ T6035] comedi: valid board names for isa-das08 driver are: [ 113.870295][ T6035] isa-das08 [ 113.873964][ T6035] das08-pgm [ 113.877245][ T6035] das08-pgh [ 113.880474][ T6035] das08-pgl [ 113.884148][ T6035] das08-aoh [ 113.892881][ T6035] das08-aol [ 113.896467][ T6035] das08-aom [ 113.899928][ T6035] das08/jr-ao [ 113.903858][ T6035] das08jr-16-ao [ 113.907728][ T6035] pc104-das08 [ 113.909688][ T5841] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.929022][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.938326][ T6035] das08jr/16 [ 113.949352][ T6035] comedi: valid board names for das16m1 driver are: [ 113.959756][ T6035] das16m1 [ 113.966032][ T5841] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.990625][ T6035] comedi: valid board names for dac02 driver are: [ 113.997229][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.997819][ T6035] dac02 [ 114.022580][ T5841] usb 2-1: Product: syz [ 114.023061][ T6035] comedi: valid board names for rti802 driver are: [ 114.036184][ T5841] usb 2-1: Manufacturer: syz [ 114.041367][ T5841] usb 2-1: SerialNumber: syz [ 114.060352][ T6035] rti802 [ 114.067014][ T6035] comedi: valid board names for rti800 driver are: [ 114.083474][ T5841] usb 2-1: config 0 descriptor?? [ 114.099011][ T6035] rti800 [ 114.111264][ T6035] rti815 [ 114.114713][ T6035] comedi: valid board names for pcm3724 driver are: [ 114.122164][ T6035] pcm3724 [ 114.150096][ T6035] comedi: valid board names for pcl818 driver are: [ 114.165079][ T5841] usb 2-1: selecting invalid altsetting 0 [ 114.174055][ T6035] pcl818l [ 114.177155][ T6035] pcl818h [ 114.186128][ T6035] pcl818hd [ 114.198108][ T6035] pcl818hg [ 114.211452][ T6035] pcl818 [ 114.237368][ T6035] pcl718 [ 114.240459][ T6035] pcm3718 [ 114.244144][ T6035] comedi: valid board names for pcl816 driver are: [ 114.254132][ T6035] pcl816 [ 114.279132][ T6035] pcl814b [ 114.285139][ T6035] comedi: valid board names for pcl812 driver are: [ 114.292132][ T6035] pcl812 [ 114.302038][ T6035] pcl812pg [ 114.322548][ T6035] acl8112pg [ 114.334785][ T6035] acl8112dg [ 114.357802][ T6035] acl8112hg [ 114.369836][ T6035] a821pgl [ 114.382154][ T5841] usb 2-1: USB disconnect, device number 2 [ 114.396889][ T6035] a821pglnda [ 114.412500][ T6035] a821pgh [ 114.435467][ T6035] a822pgl [ 114.439890][ T6035] a822pgh [ 114.449288][ T6035] a823pgl [ 114.455519][ T6035] a823pgh [ 114.458759][ T6035] pcl813 [ 114.465240][ T6035] pcl813b [ 114.475327][ T6035] acl8113 [ 114.480386][ T6035] iso813 [ 114.484408][ T6035] acl8216 [ 114.487701][ T6035] a826pg [ 114.491182][ T6035] comedi: valid board names for pcl730 driver are: [ 114.500892][ T6035] pcl730 [ 114.505621][ T6035] iso730 [ 114.508897][ T6035] acl7130 [ 114.512272][ T6035] pcm3730 [ 114.516300][ T6035] pcl725 [ 114.519682][ T6035] p8r8dio [ 114.523617][ T6035] acl7225b [ 114.527008][ T6035] p16r16dio [ 114.530408][ T6035] pcl733 [ 114.537945][ T6035] pcl734 [ 114.541097][ T6035] opmm-1616-xt [ 114.545765][ T6035] pearl-mm-p [ 114.555755][ T6035] ir104-pbf [ 114.564994][ T6035] comedi: valid board names for pcl726 driver are: [ 114.594455][ T6035] pcl726 [ 114.606885][ T6035] pcl727 [ 114.610951][ T6035] pcl728 [ 114.615532][ T6035] acl6126 [ 114.618693][ T6035] acl6128 [ 114.627127][ T6035] comedi: valid board names for pcl724 driver are: [ 114.634612][ T6035] pcl724 [ 114.641472][ T6035] pcl722 [ 114.647348][ T6035] pcl731 [ 114.650328][ T6035] acl7122 [ 114.661364][ T6035] acl7124 [ 114.664980][ T6035] pet48dio [ 114.668332][ T6035] pcmio48 [ 114.671370][ T6035] onyx-mm-dio [ 114.680918][ T6035] comedi: valid board names for pcl711 driver are: [ 114.689860][ T6035] pcl711 [ 114.692833][ T6035] pcl711b [ 114.698011][ T6035] acl8112hg [ 114.701276][ T6035] acl8112dg [ 114.708021][ T6035] comedi: valid board names for amplc_pc263 driver are: [ 114.716710][ T6035] pc263 [ 114.719607][ T6035] comedi: valid board names for amplc_pc236 driver are: [ 114.728443][ T6035] pc36at [ 114.731582][ T6035] comedi: valid board names for amplc_dio200 driver are: [ 114.742704][ T6035] pc212e [ 114.746773][ T6035] pc214e [ 114.753682][ T6035] pc215e [ 114.756670][ T6035] pc218e [ 114.759646][ T6035] pc272e [ 114.768371][ T6035] comedi: valid board names for comedi_parport driver are: [ 114.776076][ T6035] comedi_parport [ 114.786804][ T6035] comedi: valid board names for comedi_test driver are: [ 114.794801][ T6035] comedi_test [ 114.798254][ T6035] comedi: valid board names for comedi_bond driver are: [ 114.805624][ T6035] comedi_bond [ 114.934739][ T6069] fuse: Unknown parameter 'fd0x0000000000000003' [ 116.164639][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'. [ 116.443143][ T5977] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.546598][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 117.613248][ T6090] NILFS (nbd1): device size too small [ 118.403898][ T5977] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 118.467189][ T5977] usb 3-1: config 0 has no interface number 0 [ 118.578537][ T5977] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 118.630684][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.687954][ T5977] usb 3-1: config 0 descriptor?? [ 119.350526][ T5977] viperboard 3-1:0.143: version 0.00 found at bus 003 address 003 [ 119.507947][ T5977] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 119.567270][ T5977] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 120.679102][ T6111] delete_channel: no stack [ 120.776860][ T6106] tty tty3: ldisc open failed (-12), clearing slot 2 [ 120.917776][ T5977] usb 3-1: USB disconnect, device number 3 [ 121.262167][ T6117] netlink: 'syz.1.71': attribute type 11 has an invalid length. [ 121.343067][ T5841] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.556460][ T5841] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.583532][ T5841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.696362][ T5841] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.716592][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.566003][ T5841] usb 4-1: Product: syz [ 122.571092][ T5841] usb 4-1: Manufacturer: syz [ 122.577234][ T5841] usb 4-1: SerialNumber: syz [ 122.596281][ T5841] usb 4-1: config 0 descriptor?? [ 122.624785][ T5841] usb 4-1: selecting invalid altsetting 0 [ 123.276080][ T5862] usb 4-1: USB disconnect, device number 4 [ 124.808236][ T6154] delete_channel: no stack [ 128.545495][ T6192] netlink: 'syz.1.91': attribute type 11 has an invalid length. [ 130.023068][ T6208] delete_channel: no stack [ 131.083359][ T6227] Bluetooth: MGMT ver 1.22 [ 132.915955][ T6223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.160299][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.177471][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.350384][ T6262] batadv1: entered promiscuous mode [ 136.264715][ T6264] delete_channel: no stack [ 140.371476][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 140.427536][ T6310] netlink: 216 bytes leftover after parsing attributes in process `syz.1.118'. [ 140.818366][ T6321] sctp: [Deprecated]: syz.3.121 (pid 6321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.818366][ T6321] Use struct sctp_sack_info instead [ 141.780559][ T6326] delete_channel: no stack [ 142.934004][ T6331] vivid-002: ================= START STATUS ================= [ 142.941912][ T6331] vivid-002: Radio HW Seek Mode: Bounded [ 142.948493][ T6331] vivid-002: Radio Programmable HW Seek: false [ 142.954717][ T6331] vivid-002: RDS Rx I/O Mode: Block I/O [ 142.960283][ T6331] vivid-002: Generate RBDS Instead of RDS: false [ 142.966715][ T6331] vivid-002: RDS Reception: true [ 142.971682][ T6331] vivid-002: RDS Program Type: 0 inactive [ 142.977554][ T6331] vivid-002: RDS PS Name: inactive [ 142.982780][ T6331] vivid-002: RDS Radio Text: inactive [ 142.988301][ T6331] vivid-002: RDS Traffic Announcement: false inactive [ 142.995176][ T6331] vivid-002: RDS Traffic Program: false inactive [ 143.001544][ T6331] vivid-002: RDS Music: false inactive [ 143.007108][ T6331] vivid-002: ================== END STATUS ================== [ 145.774307][ T6357] mmap: syz.2.130 (6357) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.954116][ T6360] delete_channel: no stack [ 146.717124][ T6365] sctp: [Deprecated]: syz.0.132 (pid 6365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.717124][ T6365] Use struct sctp_sack_info instead [ 147.495316][ T6364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.821886][ T6376] capability: warning: `syz.0.135' uses 32-bit capabilities (legacy support in use) [ 151.067864][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 151.082223][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 151.171245][ T5861] libceph: connect (1)[b::]:6789 error -101 [ 151.185241][ T6401] qrtr: Invalid version 0 [ 151.213300][ T5861] libceph: mon0 (1)[b::]:6789 connect error [ 151.221730][ T6393] ceph: No mds server is up or the cluster is laggy [ 151.243124][ T6394] ceph: No mds server is up or the cluster is laggy [ 151.484553][ T5977] libceph: connect (1)[b::]:6789 error -101 [ 151.490622][ T5977] libceph: mon0 (1)[b::]:6789 connect error [ 152.003881][ T6408] netlink: 'syz.3.145': attribute type 11 has an invalid length. [ 153.693270][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.956575][ T5886] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 154.066457][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.096095][ T5886] usb 4-1: Product: syz [ 154.105970][ T5886] usb 4-1: Manufacturer: syz [ 154.119219][ T5886] usb 4-1: SerialNumber: syz [ 154.299055][ T5886] usb 4-1: config 0 descriptor?? [ 154.349086][ T5886] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 155.477481][ T6434] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.147'. [ 155.486705][ T6434] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 155.963368][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.976041][ T5886] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 155.987649][ T5886] usb 4-1: media controller created [ 156.014510][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.511370][ T5886] DVB: Unable to find symbol mt352_attach() [ 156.723112][ T6448] netlink: 'syz.1.156': attribute type 11 has an invalid length. [ 157.723492][ T5886] DVB: Unable to find symbol nxt6000_attach() [ 157.810803][ T5886] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 157.869229][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 158.395062][ T5886] dvb-usb: schedule remote query interval to 1000 msecs. [ 158.404928][ T5886] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 158.418068][ T5886] dvb-usb: bulk message failed: -22 (7/0) [ 158.424435][ T5886] dvb-usb: bulk message failed: -22 (7/0) [ 158.449978][ T5886] usb 4-1: USB disconnect, device number 5 [ 158.608349][ T5886] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 159.214092][ T6467] loop1: detected capacity change from 0 to 2048 [ 160.352293][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.640501][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 160.651754][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.682597][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.753307][ T5886] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 160.769196][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.051612][ T5886] usb 2-1: config 0 descriptor?? [ 161.302303][ T6473] syz.2.162 (6473) used greatest stack depth: 20744 bytes left [ 161.496250][ T5886] apple 0003:05AC:024B.0001: unknown main item tag 0xe [ 161.508863][ T5886] apple 0003:05AC:024B.0001: item fetching failed at offset 18/69 [ 161.519903][ T5886] apple 0003:05AC:024B.0001: parse failed [ 161.537550][ T5886] apple: probe of 0003:05AC:024B.0001 failed with error -22 [ 161.728890][ T5886] usb 2-1: USB disconnect, device number 3 [ 162.316603][ T6489] netlink: 'syz.0.167': attribute type 11 has an invalid length. [ 164.095428][ T6509] loop1: detected capacity change from 0 to 2048 [ 164.667787][ T6509] loop1: unable to read partition table [ 164.673954][ T6509] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 164.917141][ T5996] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.750222][ T6530] netlink: 'syz.2.178': attribute type 11 has an invalid length. [ 166.914396][ T6529] Cannot find set identified by id 0 to match [ 167.873520][ T6538] loop2: detected capacity change from 0 to 2048 [ 168.619442][ T6538] loop2: unable to read partition table [ 168.625518][ T6538] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 168.785729][ T5161] Alternate GPT is invalid, using primary GPT. [ 168.792048][ T5161] loop2: p1 p2 p3 [ 169.426816][ T5801] udevd[5801]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 169.466971][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 169.546841][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 169.576163][ T6546] trusted_key: encrypted_key: insufficient parameters specified [ 170.598919][ T6561] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 170.615097][ T6561] ref_ctr increment failed for inode: 0xe5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bf48980 [ 170.630160][ T6559] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 170.644532][ T6559] ref_ctr decrement failed for inode: 0xe5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bf48980 [ 170.764439][ T5977] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.953340][ T5977] usb 2-1: device descriptor read/64, error -71 [ 171.856154][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 171.883213][ T5977] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.043192][ T5977] usb 2-1: device descriptor read/64, error -71 [ 172.174958][ T5977] usb usb2-port1: attempt power cycle [ 172.603553][ T5977] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.653872][ T5977] usb 2-1: device descriptor read/8, error -71 [ 172.953200][ T5977] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.014712][ T5977] usb 2-1: device descriptor read/8, error -71 [ 173.145406][ T5977] usb usb2-port1: unable to enumerate USB device [ 175.931632][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 175.978357][ T6608] process 'syz.1.204' launched './file0' with NULL argv: empty string added [ 176.237352][ T6617] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 181.090109][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 181.236911][ T27] IPVS: starting estimator thread 0... [ 181.462312][ T6703] IPVS: using max 15 ests per chain, 36000 per kthread [ 183.963618][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.163152][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 184.172365][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 184.191195][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.219236][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.235608][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.249490][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.265451][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.275272][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.633724][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 184.639641][ T27] usbtmc 4-1:16.0: can't read capabilities [ 185.383413][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.505366][ T6748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.230'. [ 185.738341][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 185.745956][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.761570][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.774889][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.784286][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.797397][ T27] usb 2-1: config 0 descriptor?? [ 185.895270][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 186.752578][ T5977] usb 4-1: USB disconnect, device number 6 [ 190.156425][ T6781] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.203159][ T5905] usb 2-1: USB disconnect, device number 8 [ 191.715314][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 191.913287][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 191.935520][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.032543][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.055368][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.086842][ T27] usb 3-1: Product: syz [ 192.110380][ T27] usb 3-1: Manufacturer: syz [ 192.121450][ T27] usb 3-1: SerialNumber: syz [ 192.172034][ T27] usb 3-1: config 0 descriptor?? [ 192.215610][ T27] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.224984][ T27] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 192.652197][ T6803] loop1: detected capacity change from 0 to 2048 [ 193.384436][ T6803] loop1: unable to read partition table [ 193.390538][ T6803] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 193.475959][ T27] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 193.923247][ T5886] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.279101][ T6812] netlink: 'syz.3.247': attribute type 11 has an invalid length. [ 194.312586][ T27] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 194.324115][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 194.334250][ T27] em28xx 3-1:0.0: board has no eeprom [ 194.356718][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.397961][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.408801][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.423094][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.447892][ T27] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.455420][ T5886] usb 2-1: config 0 descriptor?? [ 194.464915][ T5886] hub 2-1:0.0: USB hub found [ 194.493585][ T27] em28xx 3-1:0.0: dvb set to bulk mode. [ 194.514441][ T5977] em28xx 3-1:0.0: Binding DVB extension [ 194.549952][ T27] usb 3-1: USB disconnect, device number 4 [ 194.597589][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.604730][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.625420][ T27] em28xx 3-1:0.0: Disconnecting em28xx [ 194.703863][ T5886] hub 2-1:0.0: 1 port detected [ 194.775366][ T5977] em28xx 3-1:0.0: Registering input extension [ 194.790143][ T27] em28xx 3-1:0.0: Closing input extension [ 194.887727][ T27] em28xx 3-1:0.0: Freeing device [ 195.322804][ T5886] hub 2-1:0.0: activate --> -90 [ 195.727806][ T5886] usb 2-1-port1: cannot reset (err = -71) [ 195.782617][ T5977] usb 2-1: USB disconnect, device number 9 [ 195.788165][ T5886] usb 2-1-port1: attempt power cycle [ 196.484756][ T6826] ======================================================= [ 196.484756][ T6826] WARNING: The mand mount option has been deprecated and [ 196.484756][ T6826] and is ignored by this kernel. Remove the mand [ 196.484756][ T6826] option from the mount to silence this warning. [ 196.484756][ T6826] ======================================================= [ 197.554196][ T6837] binder: 6829:6837 ioctl c0306201 200000000680 returned -14 [ 199.037344][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.369147][ T6847] batadv_slave_0: entered promiscuous mode [ 199.718767][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 199.730320][ T5798] CPU: 1 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 199.738026][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.748132][ T5798] Workqueue: hci1 hci_rx_work [ 199.752913][ T5798] Call Trace: [ 199.756235][ T5798] [ 199.759222][ T5798] dump_stack_lvl+0x16c/0x230 [ 199.763969][ T5798] ? show_regs_print_info+0x20/0x20 [ 199.769660][ T5798] ? load_image+0x3b0/0x3b0 [ 199.774230][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 199.779403][ T5798] ? hci_rx_work+0x43a/0xd80 [ 199.784057][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 199.788975][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 199.794235][ T5798] kobject_add_internal+0x6b8/0xc70 [ 199.799498][ T5798] kobject_add+0x156/0x220 [ 199.804048][ T5798] ? __rwlock_init+0x150/0x150 [ 199.808875][ T5798] ? kobject_init+0x1e0/0x1e0 [ 199.813615][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 199.818536][ T5798] ? get_device_parent+0x366/0x390 [ 199.823719][ T5798] device_add+0x408/0xc20 [ 199.828116][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 199.833128][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 199.838485][ T5798] ? hci_event_packet+0x4a7/0x1210 [ 199.843651][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 199.849932][ T5798] ? __copy_skb_header+0xa7/0x550 [ 199.855003][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 199.860675][ T5798] ? skb_pull_data+0xfb/0x200 [ 199.865386][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 199.870968][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 199.877088][ T5798] hci_event_packet+0x795/0x1210 [ 199.882063][ T5798] ? bis_list+0x290/0x290 [ 199.886426][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 199.891650][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 199.896964][ T5798] hci_rx_work+0x43a/0xd80 [ 199.901439][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 199.907643][ T5798] process_scheduled_works+0xa45/0x15b0 [ 199.913246][ T5798] ? assign_work+0x400/0x400 [ 199.917868][ T5798] ? assign_work+0x39e/0x400 [ 199.922480][ T5798] worker_thread+0xa55/0xfc0 [ 199.927094][ T5798] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 199.933013][ T5798] ? _raw_spin_unlock+0x40/0x40 [ 199.937881][ T5798] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 199.943808][ T5798] kthread+0x2fa/0x390 [ 199.947892][ T5798] ? pr_cont_work+0x560/0x560 [ 199.952588][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 199.957200][ T5798] ret_from_fork+0x48/0x80 [ 199.961637][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 199.966247][ T5798] ret_from_fork_asm+0x11/0x20 [ 199.971062][ T5798] [ 199.977408][ T5798] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.993267][ T5798] Bluetooth: hci1: failed to register connection device [ 200.004587][ T6835] NILFS (nbd2): device size too small [ 200.717400][ T6863] netlink: 'syz.0.260': attribute type 11 has an invalid length. [ 204.343173][ T6898] delete_channel: no stack [ 205.064075][ T6904] NILFS (nbd1): device size too small [ 205.580856][ T6909] fuse: Unknown parameter '000000000000000000003710x0000000000000007' [ 211.729189][ T6941] delete_channel: no stack [ 213.971733][ T6952] NILFS (nbd2): device size too small [ 213.993260][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 213.999495][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 214.013056][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 214.019344][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 214.037398][ T6953] fuse: Bad value for 'fd' [ 214.278815][ T6957] binder: 6949:6957 ioctl c0306201 0 returned -14 [ 216.650156][ T6980] delete_channel: no stack [ 217.501582][ T6988] NILFS (nbd3): device size too small [ 218.497637][ T6996] netlink: 'syz.0.294': attribute type 11 has an invalid length. [ 219.456409][ T7011] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 220.354769][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.379247][ T7011] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 220.472609][ T7013] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 220.556107][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'. [ 220.813241][ T7026] delete_channel: no stack [ 220.859318][ T7013] batadv0: entered promiscuous mode [ 221.028547][ T7013] batadv0: entered allmulticast mode [ 221.157826][ T7013] bond0: (slave batadv0): Releasing backup interface [ 221.215797][ T7013] bridge0: port 3(batadv0) entered blocking state [ 221.222420][ T7013] bridge0: port 3(batadv0) entered disabled state [ 221.870386][ T6668] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 221.880531][ T6668] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 223.057996][ T7045] netlink: 'syz.2.305': attribute type 11 has an invalid length. [ 226.963887][ T7066] delete_channel: no stack [ 229.252827][ T7083] Zero length message leads to an empty skb [ 231.467294][ T7101] netlink: 'syz.1.323': attribute type 11 has an invalid length. [ 233.810301][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 234.423298][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 234.437110][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.450716][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.552629][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.566069][ T5862] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.576334][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.595270][ T5862] usb 4-1: config 0 descriptor?? [ 235.264589][ T5862] HID 045e:07da: Invalid code 65791 type 1 [ 235.312415][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input8 [ 235.377129][ T5862] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 235.920907][ T7129] sctp: [Deprecated]: syz.0.334 (pid 7129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.920907][ T7129] Use struct sctp_sack_info instead [ 236.823490][ T5977] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 236.977131][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 238.483353][ T5977] usb 4-1: device descriptor read/64, error -71 [ 238.763841][ T5977] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 239.194391][ T5977] usb 4-1: device firmware changed [ 239.210696][ T5861] usb 4-1: USB disconnect, device number 7 [ 239.544455][ T5861] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 239.772966][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 239.882952][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.566490][ T5861] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.576152][ T5861] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.672281][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.715438][ T5861] usb 4-1: config 0 descriptor?? [ 241.153693][ T7164] sctp: [Deprecated]: syz.2.343 (pid 7164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.153693][ T7164] Use struct sctp_sack_info instead [ 243.820427][ T5886] usb 4-1: USB disconnect, device number 8 [ 244.521135][ T7187] : renamed from veth0_vlan (while UP) [ 245.999872][ T7211] loop1: detected capacity change from 0 to 2048 [ 247.934077][ T5886] IPVS: starting estimator thread 0... [ 248.043123][ T7240] IPVS: using max 19 ests per chain, 45600 per kthread [ 248.555383][ T7247] loop1: detected capacity change from 0 to 2048 [ 257.186188][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.192579][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.874274][ T7313] program syz.3.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.931468][ T7325] loop3: detected capacity change from 0 to 2048 [ 261.040857][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 264.761663][ T7354] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 264.782369][ T7354] sctp: [Deprecated]: syz.1.396 (pid 7354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.782369][ T7354] Use struct sctp_sack_info instead [ 265.174065][ T7365] loop1: detected capacity change from 0 to 256 [ 265.312252][ T7365] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.392988][ T7365] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 265.584922][ T7365] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 268.300230][ T7383] NILFS (nbd0): device size too small [ 268.890545][ T7390] netlink: 'syz.1.403': attribute type 11 has an invalid length. [ 271.411112][ T1055] null_blk: rq ffff888021fc8000 timed out [ 271.417389][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.428375][ T1055] null_blk: rq ffff888021fc8180 timed out [ 271.434498][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.445423][ T1055] null_blk: rq ffff888021fc8300 timed out [ 271.451199][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.462995][ T1055] null_blk: rq ffff888021fc8480 timed out [ 271.468828][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.479827][ T1055] null_blk: rq ffff888021fc8600 timed out [ 271.485814][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.496627][ T1055] null_blk: rq ffff888021fc8780 timed out [ 271.502462][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.700694][ T7414] loop3: detected capacity change from 0 to 2048 [ 271.715219][ T1055] null_blk: rq ffff888021fc8900 timed out [ 271.721066][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.732207][ T1055] null_blk: rq ffff888021fc8a80 timed out [ 271.738229][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.782352][ T1055] null_blk: rq ffff888021fc8c00 timed out [ 271.788254][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.799284][ T1055] null_blk: rq ffff888021fc8d80 timed out [ 271.805271][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 271.816141][ T1055] null_blk: rq ffff888021fc8f00 timed out [ 271.822267][ T1055] null_blk: rq ffff888021fc9080 timed out [ 271.828412][ T1055] null_blk: rq ffff888021fc9200 timed out [ 271.834825][ T1055] null_blk: rq ffff888021fc9380 timed out [ 271.840997][ T1055] null_blk: rq ffff888021fc9500 timed out [ 271.847369][ T1055] null_blk: rq ffff888021fc9680 timed out [ 271.857609][ T1055] null_blk: rq ffff888021fc9800 timed out [ 271.863912][ T1055] null_blk: rq ffff888021fc9980 timed out [ 271.876601][ T1055] null_blk: rq ffff888021fc9b00 timed out [ 271.882803][ T1055] null_blk: rq ffff888021fc9c80 timed out [ 271.888900][ T1055] null_blk: rq ffff888021fc9e00 timed out [ 271.895104][ T1055] null_blk: rq ffff888021fc9f80 timed out [ 271.901328][ T1055] null_blk: rq ffff888021fca100 timed out [ 271.907523][ T1055] null_blk: rq ffff888021fca280 timed out [ 271.918288][ T1055] null_blk: rq ffff888021fca400 timed out [ 271.924522][ T1055] null_blk: rq ffff888021fca580 timed out [ 271.930620][ T1055] null_blk: rq ffff888021fca700 timed out [ 271.936764][ T1055] null_blk: rq ffff888021fca880 timed out [ 271.942834][ T1055] null_blk: rq ffff888021fcaa00 timed out [ 271.948970][ T1055] null_blk: rq ffff888021fcab80 timed out [ 271.955537][ T1055] null_blk: rq ffff888021fcad00 timed out [ 271.961886][ T1055] null_blk: rq ffff888021fcae80 timed out [ 272.032301][ T1055] null_blk: rq ffff888021fcb000 timed out [ 272.038306][ T1055] null_blk: rq ffff888021fcb180 timed out [ 272.044768][ T1055] null_blk: rq ffff888021fcb300 timed out [ 272.050756][ T1055] null_blk: rq ffff888021fcb480 timed out [ 272.056591][ T1055] null_blk: rq ffff888021fcb600 timed out [ 272.062394][ T1055] null_blk: rq ffff888021fcb780 timed out [ 272.069564][ T1055] null_blk: rq ffff888021fcb900 timed out [ 272.076112][ T1055] null_blk: rq ffff888021fcba80 timed out [ 272.083777][ T1055] null_blk: rq ffff888021fcbc00 timed out [ 272.089767][ T1055] null_blk: rq ffff888021fcbd80 timed out [ 272.095585][ T1055] null_blk: rq ffff888021fcbf00 timed out [ 272.101366][ T1055] null_blk: rq ffff888021fcc080 timed out [ 272.107181][ T1055] null_blk: rq ffff888021fcc200 timed out [ 272.113175][ T1055] null_blk: rq ffff888021fcc380 timed out [ 272.118954][ T1055] null_blk: rq ffff888021fcc500 timed out [ 272.126738][ T1055] null_blk: rq ffff888021fcc680 timed out [ 272.132537][ T1055] null_blk: rq ffff888021fcc800 timed out [ 272.138392][ T1055] null_blk: rq ffff888021fcc980 timed out [ 272.144194][ T1055] null_blk: rq ffff888021fccb00 timed out [ 272.149959][ T1055] null_blk: rq ffff888021fccc80 timed out [ 272.156004][ T1055] null_blk: rq ffff888021fcce00 timed out [ 272.161773][ T1055] null_blk: rq ffff888021fccf80 timed out [ 272.167599][ T1055] null_blk: rq ffff888021fcd100 timed out [ 272.173409][ T1055] null_blk: rq ffff888021fcd280 timed out [ 272.179984][ T1055] null_blk: rq ffff888021fcd400 timed out [ 272.185836][ T1055] null_blk: rq ffff888021fcd580 timed out [ 272.191629][ T1055] null_blk: rq ffff888021fcd700 timed out [ 272.197832][ T1055] null_blk: rq ffff888021fcd880 timed out [ 272.203660][ T1055] null_blk: rq ffff888021fcda00 timed out [ 272.209529][ T1055] null_blk: rq ffff888021fcdb80 timed out [ 272.215428][ T1055] null_blk: rq ffff888021fcdd00 timed out [ 272.221200][ T1055] null_blk: rq ffff888021fcde80 timed out [ 273.507078][ C0] ------------[ cut here ]------------ [ 273.513098][ C0] WARNING: CPU: 0 PID: 7427 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 273.523189][ C0] Modules linked in: [ 273.527129][ C0] CPU: 0 PID: 7427 Comm: syz.3.413 Not tainted syzkaller #0 [ 273.534451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.544547][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 273.550892][ C0] Code: 24 4c 89 e7 e8 9e cc d3 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 a3 96 f7 0f 0b e9 f6 f7 ff ff e8 bd a3 96 f7 <0f> 0b e9 48 fb ff ff e8 b1 a3 96 f7 48 c7 c7 60 07 24 8e 4c 89 e6 [ 273.570646][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 273.576767][ C0] RAX: ffffffff89eeebd3 RBX: ffffffff89eed9d6 RCX: ffff888020ed0000 [ 273.584794][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.592774][ C0] RBP: 0000000000000000 R08: ffff888020ed0000 R09: 0000000000000003 [ 273.600802][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bb723c0 [ 273.608849][ C0] R13: dffffc0000000000 R14: ffff88805bb728b0 R15: ffff88805bd23824 [ 273.616884][ C0] FS: 00007f6e642e16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 273.625868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.632462][ C0] CR2: 0000000000000000 CR3: 000000002e034000 CR4: 00000000003506f0 [ 273.640497][ C0] Call Trace: [ 273.643815][ C0] [ 273.646680][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 273.652244][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 273.657864][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 273.664668][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 273.670233][ C0] __iterate_interfaces+0x243/0x500 [ 273.675470][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 273.681724][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 273.688959][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 273.695241][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 273.702291][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 273.707535][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 273.712893][ C0] ? hw_scan_work+0xf40/0xf40 [ 273.717612][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 273.722731][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 273.728846][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 273.734004][ C0] handle_softirqs+0x280/0x820 [ 273.738783][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 273.743601][ C0] ? do_softirq+0x180/0x180 [ 273.748119][ C0] __irq_exit_rcu+0xc7/0x190 [ 273.752773][ C0] ? irq_exit_rcu+0x20/0x20 [ 273.757315][ C0] irq_exit_rcu+0x9/0x20 [ 273.761565][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 273.767255][ C0] [ 273.770191][ C0] [ 273.773164][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.779156][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 273.784473][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 273.804120][ C0] RSP: 0018:ffffc9000bd97900 EFLAGS: 00000206 [ 273.810197][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f8fd4f56bdd30d00 [ 273.818343][ C0] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6b00 [ 273.826368][ C0] RBP: ffffc9000bd97a08 R08: dffffc0000000000 R09: 1ffffffff21b50a6 [ 273.834399][ C0] R10: dffffc0000000000 R11: fffffbfff21b50a7 R12: 1ffff920017b2f2c [ 273.842411][ C0] R13: ffff88802dd994a0 R14: 0000000000000246 R15: dffffc0000000000 [ 273.850499][ C0] ? __might_sleep+0xe0/0xe0 [ 273.855144][ C0] ? read_lock_is_recursive+0x20/0x20 [ 273.860552][ C0] ? verify_lock_unused+0x140/0x140 [ 273.865883][ C0] ? __might_fault+0xaa/0x120 [ 273.870595][ C0] __might_fault+0xc6/0x120 [ 273.875140][ C0] ? __might_fault+0xaa/0x120 [ 273.879828][ C0] _copy_from_user+0x2a/0xe0 [ 273.884458][ C0] ___sys_recvmsg+0x12f/0x510 [ 273.889165][ C0] ? __sys_recvmsg+0x270/0x270 [ 273.893982][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 273.899023][ C0] ? __might_fault+0x52/0x120 [ 273.903741][ C0] ? __might_fault+0xc6/0x120 [ 273.908455][ C0] ? __might_fault+0xaa/0x120 [ 273.913209][ C0] do_recvmmsg+0x360/0x7d0 [ 273.917662][ C0] ? __sys_recvmmsg+0x280/0x280 [ 273.922552][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 273.928324][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 273.934028][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 273.939075][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 273.943720][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 273.948931][ C0] do_syscall_64+0x55/0xb0 [ 273.953388][ C0] ? clear_bhb_loop+0x40/0x90 [ 273.958073][ C0] ? clear_bhb_loop+0x40/0x90 [ 273.962758][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.968812][ C0] RIP: 0033:0x7f6e6338f6c9 [ 273.973296][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.992960][ C0] RSP: 002b:00007f6e642e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 274.001410][ C0] RAX: ffffffffffffffda RBX: 00007f6e635e6090 RCX: 00007f6e6338f6c9 [ 274.009416][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 274.017433][ C0] RBP: 00007f6e63411f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.025537][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 274.033538][ C0] R13: 00007f6e635e6128 R14: 00007f6e635e6090 R15: 00007ffdad9917b8 [ 274.041529][ C0] [ 274.044583][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.051862][ C0] CPU: 0 PID: 7427 Comm: syz.3.413 Not tainted syzkaller #0 [ 274.059163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.069296][ C0] Call Trace: [ 274.072590][ C0] [ 274.075446][ C0] dump_stack_lvl+0x16c/0x230 [ 274.080151][ C0] ? show_regs_print_info+0x20/0x20 [ 274.085366][ C0] ? load_image+0x3b0/0x3b0 [ 274.089887][ C0] panic+0x2c0/0x710 [ 274.093792][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 274.098305][ C0] __warn+0x2e0/0x470 [ 274.102298][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 274.108027][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 274.113844][ C0] report_bug+0x2be/0x4f0 [ 274.118186][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 274.124008][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 274.129841][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 274.135576][ C0] handle_bug+0xcf/0x120 [ 274.140016][ C0] exc_invalid_op+0x1a/0x50 [ 274.144564][ C0] asm_exc_invalid_op+0x1a/0x20 [ 274.149590][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 274.155925][ C0] Code: 24 4c 89 e7 e8 9e cc d3 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 a3 96 f7 0f 0b e9 f6 f7 ff ff e8 bd a3 96 f7 <0f> 0b e9 48 fb ff ff e8 b1 a3 96 f7 48 c7 c7 60 07 24 8e 4c 89 e6 [ 274.175548][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 274.181652][ C0] RAX: ffffffff89eeebd3 RBX: ffffffff89eed9d6 RCX: ffff888020ed0000 [ 274.189649][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.197717][ C0] RBP: 0000000000000000 R08: ffff888020ed0000 R09: 0000000000000003 [ 274.205699][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bb723c0 [ 274.214198][ C0] R13: dffffc0000000000 R14: ffff88805bb728b0 R15: ffff88805bd23824 [ 274.222183][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 274.227744][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 274.233490][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 274.239234][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 274.244811][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 274.250274][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 274.257062][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 274.262621][ C0] __iterate_interfaces+0x243/0x500 [ 274.267832][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 274.274081][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 274.281302][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 274.287574][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 274.294636][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 274.299945][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 274.305162][ C0] ? hw_scan_work+0xf40/0xf40 [ 274.309858][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 274.314978][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 274.321064][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 274.326199][ C0] handle_softirqs+0x280/0x820 [ 274.330977][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 274.335755][ C0] ? do_softirq+0x180/0x180 [ 274.340296][ C0] __irq_exit_rcu+0xc7/0x190 [ 274.344910][ C0] ? irq_exit_rcu+0x20/0x20 [ 274.349419][ C0] irq_exit_rcu+0x9/0x20 [ 274.353663][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 274.359395][ C0] [ 274.362350][ C0] [ 274.365311][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.371293][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 274.376581][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 274.396190][ C0] RSP: 0018:ffffc9000bd97900 EFLAGS: 00000206 [ 274.402260][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f8fd4f56bdd30d00 [ 274.410234][ C0] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6b00 [ 274.418207][ C0] RBP: ffffc9000bd97a08 R08: dffffc0000000000 R09: 1ffffffff21b50a6 [ 274.426183][ C0] R10: dffffc0000000000 R11: fffffbfff21b50a7 R12: 1ffff920017b2f2c [ 274.434162][ C0] R13: ffff88802dd994a0 R14: 0000000000000246 R15: dffffc0000000000 [ 274.442156][ C0] ? __might_sleep+0xe0/0xe0 [ 274.446757][ C0] ? read_lock_is_recursive+0x20/0x20 [ 274.452138][ C0] ? verify_lock_unused+0x140/0x140 [ 274.457343][ C0] ? __might_fault+0xaa/0x120 [ 274.462025][ C0] __might_fault+0xc6/0x120 [ 274.466529][ C0] ? __might_fault+0xaa/0x120 [ 274.471205][ C0] _copy_from_user+0x2a/0xe0 [ 274.475803][ C0] ___sys_recvmsg+0x12f/0x510 [ 274.480499][ C0] ? __sys_recvmsg+0x270/0x270 [ 274.485292][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 274.490321][ C0] ? __might_fault+0x52/0x120 [ 274.495008][ C0] ? __might_fault+0xc6/0x120 [ 274.499684][ C0] ? __might_fault+0xaa/0x120 [ 274.504386][ C0] do_recvmmsg+0x360/0x7d0 [ 274.508821][ C0] ? __sys_recvmmsg+0x280/0x280 [ 274.513693][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 274.519418][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 274.525067][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 274.530119][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 274.534768][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 274.539998][ C0] do_syscall_64+0x55/0xb0 [ 274.544422][ C0] ? clear_bhb_loop+0x40/0x90 [ 274.549104][ C0] ? clear_bhb_loop+0x40/0x90 [ 274.553788][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.559686][ C0] RIP: 0033:0x7f6e6338f6c9 [ 274.564192][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.583893][ C0] RSP: 002b:00007f6e642e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 274.592417][ C0] RAX: ffffffffffffffda RBX: 00007f6e635e6090 RCX: 00007f6e6338f6c9 [ 274.600420][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 274.608581][ C0] RBP: 00007f6e63411f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.616553][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 274.624527][ C0] R13: 00007f6e635e6128 R14: 00007f6e635e6090 R15: 00007ffdad9917b8 [ 274.632528][ C0] [ 274.635877][ C0] Kernel Offset: disabled [ 274.640275][ C0] Rebooting in 86400 seconds..