last executing test programs: 9.842579975s ago: executing program 1 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) pipe(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, 0x0, &(0x7f0000000a40)=@tcp6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x1c, r7, 0x411, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000502000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0xf5, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004064}, 0x4008000) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50) 8.26217965s ago: executing program 1 (id=964): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 7.483902831s ago: executing program 0 (id=969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f0005000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.371370495s ago: executing program 2 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_route_sched(r1, 0x0, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 7.215616875s ago: executing program 0 (id=972): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) 7.044014447s ago: executing program 2 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7fe582adabf8fa2708000500", @ANYRES32=r1, @ANYBLOB="5000128009000100766c616e00000000400002800600010001000000340003800c00010000000000080000000c00010000020000ff0f00"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 6.86779985s ago: executing program 2 (id=974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0xa, &(0x7f0000000180)=[{0x7fff, 0x1, 0x6, 0x5}, {0x1, 0x7, 0x8, 0x885}, {0x80, 0x6, 0x5, 0x7ff}, {0x4, 0xfc, 0x5, 0x2}, {0x8, 0xfb, 0x3, 0x5}, {0x6, 0x7, 0x5, 0x1}, {0x0, 0x9, 0x4, 0xfffffff9}, {0x7, 0x8, 0xd, 0x5}, {0x1, 0x0, 0x7, 0x7}, {0x1c3, 0x21, 0x8, 0x50c5}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) socket$vsock_stream(0x28, 0x1, 0x0) 6.517872406s ago: executing program 3 (id=975): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) 6.235920242s ago: executing program 1 (id=976): fsopen(&(0x7f0000000400)='ceph\x00', 0x0) socket$packet(0x11, 0xa, 0x300) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.044168217s ago: executing program 1 (id=977): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24008844) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10) 5.905510245s ago: executing program 3 (id=978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x8}, 0x8) 5.646421048s ago: executing program 3 (id=979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x30000, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) 5.389772792s ago: executing program 3 (id=980): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f0005000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.135978845s ago: executing program 0 (id=981): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfefffffd, 0xb2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) socket$kcm(0x11, 0x2, 0x0) fcntl$setpipe(r6, 0x407, 0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x44) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x31, 0x40000000788, 0x7fffffffffc, 0x183, 0x40004, 0x0, 0xee, 0x10000000003, 0x7, 0x1000045, 0x3, 0x3b9, 0xf, 0xfffffffffffffffd, 0x15855810, 0x8], 0x26000, 0x384210}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004004) 5.074848902s ago: executing program 3 (id=982): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x400, 0x2, 0x5a}, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r4}, 0x38) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = creat(&(0x7f0000000540)='./file0\x00', 0x80) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) ioctl$int_in(r0, 0x40000000af01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x400, 0x1, {0x8, 0x1}, {0x4c, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x0, 0x0, 0x3, 0x4}, {0xc, 0x1, 0x4, 0xfffffe01}, {0x9, 0x97, 0x28}]}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) 2.461777731s ago: executing program 2 (id=983): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dt2815\x00', [0xfffffff9, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0x0, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0x8, 0x80208, 0x5, 0x800800, 0xeadb, 0xffffffff, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x8080, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 2.122393485s ago: executing program 1 (id=984): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x81, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r2, 0x1) 1.844115991s ago: executing program 3 (id=985): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1.283696143s ago: executing program 0 (id=986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) socket(0xa, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000240)={0xc, 0x10001, 0xff}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc5c7}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r3 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, &(0x7f0000000580)) sendmmsg$alg(r3, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='=', 0x1}], 0x1, &(0x7f0000000900)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) 242.806658ms ago: executing program 0 (id=987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x8}, 0x8) 213.279302ms ago: executing program 2 (id=988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x30000, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) 180.394426ms ago: executing program 1 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x7c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast}, 0x1fffffffffffffe, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x7c}}, 0x0) 42.210684ms ago: executing program 0 (id=990): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 2 (id=998): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 81.885322][ T5755] cgroup: Unknown subsys name 'net' [ 82.024056][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.784561][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.021053][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.024899][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.037498][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.045282][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.047387][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.060754][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.070678][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.078651][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.093796][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.095784][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.103160][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.116076][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.123770][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.131499][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.139125][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.150409][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.158584][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.166068][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.200050][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.210833][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.218647][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.231037][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.240317][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.248530][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.552604][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.789306][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.809165][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.818960][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.826611][ T5768] bridge_slave_0: entered allmulticast mode [ 86.834182][ T5768] bridge_slave_0: entered promiscuous mode [ 86.844976][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.852244][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.859822][ T5768] bridge_slave_1: entered allmulticast mode [ 86.869019][ T5768] bridge_slave_1: entered promiscuous mode [ 86.942644][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 87.052863][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.104477][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.240057][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.247417][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.254628][ T5774] bridge_slave_0: entered allmulticast mode [ 87.266900][ T5774] bridge_slave_0: entered promiscuous mode [ 87.362786][ T5768] team0: Port device team_slave_0 added [ 87.373427][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.382087][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.393300][ T5774] bridge_slave_1: entered allmulticast mode [ 87.401126][ T5774] bridge_slave_1: entered promiscuous mode [ 87.409324][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.446269][ T5768] team0: Port device team_slave_1 added [ 87.453297][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.460938][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.468612][ T5766] bridge_slave_0: entered allmulticast mode [ 87.476108][ T5766] bridge_slave_0: entered promiscuous mode [ 87.521615][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.535759][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.543016][ T5766] bridge_slave_1: entered allmulticast mode [ 87.551267][ T5766] bridge_slave_1: entered promiscuous mode [ 87.652123][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.664296][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.693707][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.700963][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.727093][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.740612][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.747681][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.775654][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.796173][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.816057][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.873578][ T5774] team0: Port device team_slave_0 added [ 87.884177][ T5774] team0: Port device team_slave_1 added [ 87.967797][ T5766] team0: Port device team_slave_0 added [ 87.974435][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.982314][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.008317][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.021271][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.028341][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.054494][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.080338][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.087633][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.094793][ T5778] bridge_slave_0: entered allmulticast mode [ 88.102281][ T5778] bridge_slave_0: entered promiscuous mode [ 88.111735][ T5766] team0: Port device team_slave_1 added [ 88.132584][ T5768] hsr_slave_0: entered promiscuous mode [ 88.139546][ T5768] hsr_slave_1: entered promiscuous mode [ 88.147862][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.155047][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.162929][ T5778] bridge_slave_1: entered allmulticast mode [ 88.170520][ T5778] bridge_slave_1: entered promiscuous mode [ 88.216374][ T51] Bluetooth: hci1: command tx timeout [ 88.222463][ T5773] Bluetooth: hci0: command tx timeout [ 88.228546][ T51] Bluetooth: hci2: command tx timeout [ 88.276827][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.283842][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.313526][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.317014][ T5773] Bluetooth: hci3: command tx timeout [ 88.331147][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.338411][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.364932][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.398807][ T5774] hsr_slave_0: entered promiscuous mode [ 88.405313][ T5774] hsr_slave_1: entered promiscuous mode [ 88.412217][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.420834][ T5774] Cannot create hsr debugfs directory [ 88.441728][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.455175][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.561497][ T5778] team0: Port device team_slave_0 added [ 88.598873][ T5766] hsr_slave_0: entered promiscuous mode [ 88.605346][ T5766] hsr_slave_1: entered promiscuous mode [ 88.611888][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.623405][ T5766] Cannot create hsr debugfs directory [ 88.631181][ T5778] team0: Port device team_slave_1 added [ 88.739081][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.747125][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.773587][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.820480][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.827945][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.854161][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.038071][ T5778] hsr_slave_0: entered promiscuous mode [ 89.046582][ T5778] hsr_slave_1: entered promiscuous mode [ 89.052784][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.061104][ T5778] Cannot create hsr debugfs directory [ 89.129561][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.179509][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.190306][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.221929][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.306794][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.321485][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.332782][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.358017][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.443758][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.454752][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.468356][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.487371][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.603810][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.619024][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.632800][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.643367][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.704597][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.765160][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.798877][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.806286][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.822200][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.829445][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.889399][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.954618][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.968786][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.984955][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.992181][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.018461][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.025768][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.042252][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.074733][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.122918][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.130231][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.175198][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.182377][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.229075][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.253547][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.260754][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.275355][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.282545][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.296152][ T5773] Bluetooth: hci0: command tx timeout [ 90.296908][ T51] Bluetooth: hci2: command tx timeout [ 90.301607][ T5773] Bluetooth: hci1: command tx timeout [ 90.382208][ T5773] Bluetooth: hci3: command tx timeout [ 90.415181][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.531340][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.654035][ T5768] veth0_vlan: entered promiscuous mode [ 90.712994][ T5768] veth1_vlan: entered promiscuous mode [ 90.795188][ T5768] veth0_macvtap: entered promiscuous mode [ 90.847138][ T5768] veth1_macvtap: entered promiscuous mode [ 90.884175][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.918909][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.951677][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.967246][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.988715][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.003439][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074483][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.103164][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.152630][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.262924][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.286462][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.311336][ T5766] veth0_vlan: entered promiscuous mode [ 91.318336][ T5778] veth0_vlan: entered promiscuous mode [ 91.344743][ T5766] veth1_vlan: entered promiscuous mode [ 91.368122][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.376322][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.387981][ T5778] veth1_vlan: entered promiscuous mode [ 91.437837][ T5766] veth0_macvtap: entered promiscuous mode [ 91.462960][ T5766] veth1_macvtap: entered promiscuous mode [ 91.531068][ T5774] veth0_vlan: entered promiscuous mode [ 91.548037][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.561042][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.573372][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.590432][ T5778] veth0_macvtap: entered promiscuous mode [ 91.604169][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.620639][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.632385][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.644607][ T5774] veth1_vlan: entered promiscuous mode [ 91.667557][ T5778] veth1_macvtap: entered promiscuous mode [ 91.709007][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722775][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.731704][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747418][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.801618][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.814126][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.825313][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.836654][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.850489][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.889382][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.913374][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.925441][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.936926][ T5859] program syz.2.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.937344][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.959926][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.989530][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.011965][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.021806][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.050618][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.080944][ T1189] cfg80211: failed to load regulatory.db [ 92.088442][ T5774] veth0_macvtap: entered promiscuous mode [ 92.094641][ T5774] veth1_macvtap: entered promiscuous mode [ 92.235307][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.265668][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.312055][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.330122][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.342757][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.354725][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.365040][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.375772][ T5773] Bluetooth: hci1: command tx timeout [ 92.381585][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.393993][ T5773] Bluetooth: hci2: command tx timeout [ 92.394006][ T51] Bluetooth: hci0: command tx timeout [ 92.408617][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.452121][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.464787][ T51] Bluetooth: hci3: command tx timeout [ 92.474522][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.484517][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.507775][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.518085][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.529812][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.543577][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.556715][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.585849][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.593108][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.616692][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.642941][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.656497][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.665388][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.677042][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.798009][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.824759][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.980739][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.010898][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.066890][ T5864] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.112900][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.157328][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.276871][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 93.315872][ T5864] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 93.324237][ T5864] usb 3-1: config 0 has no interface number 0 [ 93.350277][ T5864] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 93.367920][ T5864] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 93.394981][ T5864] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.442616][ T5864] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 93.459071][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.480438][ T5864] usb 3-1: config 0 descriptor?? [ 93.492896][ T5864] ldusb 3-1:0.55: Interrupt in endpoint not found [ 93.735558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.566027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.574803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.587997][ T51] Bluetooth: hci0: command tx timeout [ 94.588004][ T5773] Bluetooth: hci2: command tx timeout [ 94.588098][ T5773] Bluetooth: hci1: command tx timeout [ 94.593449][ T51] Bluetooth: hci3: command tx timeout [ 94.936195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.016657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.774938][ T5864] usb 3-1: USB disconnect, device number 2 [ 96.516668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.525546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.735837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.745450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.871960][ T5893] syz.1.13 (5893) used greatest stack depth: 17864 bytes left [ 97.116142][ T787] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.321829][ T787] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 97.363573][ T787] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 97.375071][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.386012][ T787] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.397853][ T787] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.406355][ T787] usb 3-1: Product: syz [ 97.410576][ T787] usb 3-1: Manufacturer: syz [ 97.415175][ T787] usb 3-1: SerialNumber: syz [ 97.438926][ T787] usb 3-1: config 0 descriptor?? [ 97.469111][ T787] usb 3-1: selecting invalid altsetting 0 [ 97.712897][ T5803] usb 3-1: USB disconnect, device number 3 [ 98.112125][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.175653][ T5757] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.369351][ T5757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.385629][ T5757] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 98.404313][ T5757] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 98.423834][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.463866][ T5757] usb 4-1: config 0 descriptor?? [ 98.497764][ T5757] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 98.525104][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 98.569197][ T5757] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 98.594937][ T5757] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 98.624192][ T5757] usb 4-1: media controller created [ 98.647167][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.667811][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 98.674296][ T5757] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 98.686127][ T5757] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 98.784465][ T5757] dvb-usb: schedule remote query interval to 150 msecs. [ 98.865224][ T5757] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 98.925636][ T5757] usb 4-1: USB disconnect, device number 2 [ 99.060903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.157291][ T5757] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 99.624018][ T5935] Zero length message leads to an empty skb [ 99.678745][ T5939] 9pnet_virtio: no channels available for device syz [ 102.618945][ T5958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31'. [ 102.630068][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 104.115496][ C0] sched: RT throttling activated [ 105.015772][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.226184][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 105.247570][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.263111][ T5812] usb 3-1: config 0 has no interface number 0 [ 105.281623][ T5812] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 105.299559][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.322062][ T5812] usb 3-1: Product: syz [ 105.328444][ T5812] usb 3-1: Manufacturer: syz [ 105.333127][ T5812] usb 3-1: SerialNumber: syz [ 105.349814][ T5812] usb 3-1: config 0 descriptor?? [ 105.382936][ T5812] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 105.392429][ T5812] usb 3-1: selecting invalid altsetting 1 [ 105.400967][ T5812] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 105.424697][ T5812] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.436155][ T5812] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 105.453860][ T5812] usb 3-1: media controller created [ 105.553948][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.625323][ T5972] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 105.710433][ T5812] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 105.755729][ T5812] zl10353_read_register: readreg error (reg=127, ret==-71) [ 105.796824][ T5812] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 105.953417][ T5812] usb 3-1: USB disconnect, device number 4 [ 113.105356][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 113.374378][ T6014] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 133.860978][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.876595][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.699130][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.758725][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.689453][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 146.719196][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 146.753959][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 147.072049][ T6194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.176232][ T6194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.092923][ T6194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629457][ T6194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.274359][ T6203] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 149.830148][ T6194] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.919771][ T6194] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.990009][ T6194] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.026527][ T6194] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.693460][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 158.958909][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 159.436787][ T6290] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 162.942469][ T6324] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 166.519098][ T6343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.126'. [ 167.008452][ T6351] (null): rxe_set_mtu: Set mtu to 1024 [ 168.623951][ T6351] infiniband syz2: set down [ 168.628959][ T6351] infiniband syz2: added ipvlan0 [ 168.637983][ T6351] syz2: rxe_create_cq: returned err = -12 [ 168.644303][ T6351] infiniband syz2: Couldn't create ib_mad CQ [ 168.650674][ T6351] infiniband syz2: Couldn't open port 1 [ 169.564020][ T6351] RDS/IB: syz2: added [ 169.568617][ T6351] smc: adding ib device syz2 with port count 1 [ 169.574919][ T6351] smc: ib device syz2 port 1 has pnetid [ 171.640314][ T6352] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.646753][ T6352] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.735690][ T6359] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 171.762149][ T6352] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.801620][ T6352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.807778][ T6352] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.821657][ T6352] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.829240][ T6352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.835185][ T6352] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.843217][ T6352] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.850257][ T6352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.856310][ T6352] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.876590][ T6352] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.085688][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.091824][ T5773] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.098295][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.104343][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.177010][ T6386] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 175.969146][ T6397] netlink: 'syz.3.140': attribute type 12 has an invalid length. [ 176.059016][ T6396] random: crng reseeded on system resumption [ 176.135782][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.141828][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.148567][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.154616][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.215942][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.222243][ T5772] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.228399][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.234659][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.019946][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.766250][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 188.007351][ T6521] netlink: 'syz.3.173': attribute type 13 has an invalid length. [ 188.744151][ T5773] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 188.901634][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 189.035495][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 189.067265][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 189.098826][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 192.777087][ T5773] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 192.786306][ T5773] Bluetooth: hci0: Injecting HCI hardware error event [ 192.794173][ T5772] Bluetooth: hci0: hardware error 0x00 [ 193.586072][ T6574] process 'syz.2.191' launched './file0' with NULL argv: empty string added [ 194.350976][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.364260][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.469946][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.476485][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.859180][ T5772] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.057351][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 199.343211][ T5772] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 200.612251][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 204.504590][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 204.514837][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 204.540910][ T5772] Bluetooth: hci3: hardware error 0x00 [ 206.615802][ T5772] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 206.812609][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 209.380993][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.429695][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.808135][ T6710] netlink: 56 bytes leftover after parsing attributes in process `syz.1.238'. [ 210.830369][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 210.936180][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 210.950288][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 210.965941][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 216.963202][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.992715][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.340631][ T6797] tipc: Started in network mode [ 219.355349][ T6797] tipc: Node identity 3a07d388b528, cluster identity 4711 [ 219.376386][ T6797] tipc: Enabled bearer , priority 0 [ 219.461997][ T6797] syzkaller0: entered promiscuous mode [ 219.480073][ T6797] syzkaller0: entered allmulticast mode [ 219.858616][ T6796] tipc: Resetting bearer [ 220.473113][ T6796] tipc: Disabling bearer [ 220.513809][ T5894] tipc: Node number set to 2402276232 [ 230.637086][ T6889] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 236.678449][ T6933] Can't find a SQUASHFS superblock on nullb0 [ 237.678386][ T6935] tipc: Started in network mode [ 237.683342][ T6935] tipc: Node identity fe5b16f2e49a, cluster identity 4711 [ 237.715830][ T6935] tipc: Enabled bearer , priority 0 [ 237.844520][ T6935] syzkaller0: entered promiscuous mode [ 237.870791][ T6935] syzkaller0: entered allmulticast mode [ 237.990411][ T6934] tipc: Resetting bearer [ 238.074184][ T6934] tipc: Disabling bearer [ 240.033685][ T6955] vlan0: entered promiscuous mode [ 240.047997][ T6955] team0: Port device vlan0 added [ 243.119747][ T6969] tipc: Started in network mode [ 243.125375][ T6969] tipc: Node identity 16fbfd3f5c87, cluster identity 4711 [ 243.135289][ T6969] tipc: Enabled bearer , priority 0 [ 243.190969][ T6969] syzkaller0: entered promiscuous mode [ 243.210317][ T6969] syzkaller0: entered allmulticast mode [ 243.289946][ T6968] tipc: Resetting bearer [ 243.364743][ T6968] tipc: Disabling bearer [ 246.888381][ T7000] tipc: Enabled bearer , priority 0 [ 246.963891][ T6999] tipc: Disabling bearer [ 253.593535][ T7037] tipc: Started in network mode [ 253.599443][ T7037] tipc: Node identity 3ecb891ee8c4, cluster identity 4711 [ 253.607417][ T7037] tipc: Enabled bearer , priority 0 [ 253.641243][ T7036] tipc: Disabling bearer [ 255.002877][ T7055] 9pnet_virtio: no channels available for device syz [ 255.902510][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909378][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.923085][ T27] audit: type=1326 audit(1768256343.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.044466][ T27] audit: type=1326 audit(1768256343.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.098386][ T27] audit: type=1326 audit(1768256343.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.128157][ T7065] tipc: Enabled bearer , priority 0 [ 256.160083][ T27] audit: type=1326 audit(1768256343.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.183884][ T27] audit: type=1326 audit(1768256343.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.210434][ T7064] tipc: Disabling bearer [ 256.302912][ T27] audit: type=1326 audit(1768256343.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.404042][ T27] audit: type=1326 audit(1768256343.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.486696][ T27] audit: type=1326 audit(1768256343.620:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.543854][ T27] audit: type=1326 audit(1768256343.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 256.604876][ T27] audit: type=1326 audit(1768256343.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9c18f749 code=0x7ffc0000 [ 261.275841][ T7110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.053074][ T7126] Bluetooth: MGMT ver 1.22 [ 264.753112][ T7132] 9pnet_virtio: no channels available for device syz [ 265.467528][ T7143] 9pnet_virtio: no channels available for device syz [ 268.285577][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.533785][ T7152] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 268.589840][ T7152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.304086][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 270.615848][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.814155][ T7203] 9pnet_virtio: no channels available for device syz [ 274.387709][ T7225] tipc: Enabled bearer , priority 0 [ 274.402432][ T7225] syzkaller0: entered promiscuous mode [ 274.408269][ T7225] syzkaller0: entered allmulticast mode [ 274.449226][ T7224] tipc: Resetting bearer [ 274.522240][ T7224] tipc: Disabling bearer [ 277.693735][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 280.293703][ T7251] tipc: Enabled bearer , priority 0 [ 280.325709][ T7251] syzkaller0: entered promiscuous mode [ 280.331430][ T7251] syzkaller0: entered allmulticast mode [ 280.365227][ T7250] tipc: Resetting bearer [ 280.428340][ T7250] tipc: Disabling bearer [ 281.986585][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 283.171623][ T7275] 9pnet_virtio: no channels available for device syz [ 283.289089][ T7283] tipc: Enabled bearer , priority 0 [ 283.346749][ T7283] syzkaller0: entered promiscuous mode [ 283.383405][ T7283] syzkaller0: entered allmulticast mode [ 283.491673][ T7280] tipc: Resetting bearer [ 283.604895][ T7280] tipc: Disabling bearer [ 288.108460][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 289.197776][ T7320] tipc: Enabled bearer , priority 0 [ 289.228497][ T7320] syzkaller0: entered promiscuous mode [ 289.234130][ T7320] syzkaller0: entered allmulticast mode [ 289.279568][ T7319] tipc: Resetting bearer [ 289.424789][ T7319] tipc: Disabling bearer [ 291.652794][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 292.258745][ T7349] tipc: Enabled bearer , priority 0 [ 292.273054][ T7349] syzkaller0: entered promiscuous mode [ 292.279349][ T7349] syzkaller0: entered allmulticast mode [ 292.308527][ T7348] tipc: Resetting bearer [ 292.379350][ T7348] tipc: Disabling bearer [ 292.917187][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 294.578951][ T7380] tipc: Enabled bearer , priority 0 [ 294.609211][ T7380] syzkaller0: entered promiscuous mode [ 294.614901][ T7380] syzkaller0: entered allmulticast mode [ 294.859911][ T7379] tipc: Resetting bearer [ 294.929443][ T7379] tipc: Disabling bearer [ 295.645729][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 297.064537][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.465'. [ 299.076334][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 300.945907][ T7425] tipc: Enabled bearer , priority 0 [ 301.047408][ T7425] syzkaller0: entered promiscuous mode [ 301.213304][ T7425] syzkaller0: entered allmulticast mode [ 301.342729][ T7424] tipc: Resetting bearer [ 301.641401][ T7424] tipc: Disabling bearer [ 301.749118][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'. [ 305.127294][ T7473] tipc: Enabled bearer , priority 0 [ 305.141803][ T7473] syzkaller0: entered promiscuous mode [ 305.148501][ T7473] syzkaller0: entered allmulticast mode [ 305.166900][ T7471] tipc: Resetting bearer [ 305.200636][ T7471] tipc: Disabling bearer [ 308.833375][ T7515] netlink: 'syz.3.503': attribute type 3 has an invalid length. [ 309.007485][ T7516] tipc: Enabled bearer , priority 0 [ 309.135129][ T7516] syzkaller0: entered promiscuous mode [ 309.148388][ T7516] syzkaller0: entered allmulticast mode [ 309.517878][ T7511] tipc: Resetting bearer [ 309.591928][ T7511] tipc: Disabling bearer [ 310.116702][ T7530] tipc: Enabled bearer , priority 0 [ 310.163937][ T7530] syzkaller0: entered promiscuous mode [ 310.182103][ T7530] syzkaller0: entered allmulticast mode [ 310.212198][ T7528] tipc: Resetting bearer [ 310.248793][ T7528] tipc: Disabling bearer [ 314.186735][ T7577] 9pnet_virtio: no channels available for device syz [ 317.395101][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.401667][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.705107][ T5894] IPVS: starting estimator thread 0... [ 325.805611][ T7649] IPVS: using max 16 ests per chain, 38400 per kthread [ 327.146409][ T7659] netlink: 'syz.1.545': attribute type 3 has an invalid length. [ 328.280826][ T7672] 9pnet_virtio: no channels available for device syz [ 335.285769][ T7708] tipc: Enabled bearer , priority 0 [ 335.360447][ T7708] syzkaller0: entered promiscuous mode [ 335.375944][ T7708] syzkaller0: entered allmulticast mode [ 335.434707][ T7707] tipc: Resetting bearer [ 335.546695][ T7707] tipc: Disabling bearer [ 335.621177][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 336.305878][ T7725] 9pnet_virtio: no channels available for device syz [ 337.516825][ T5864] IPVS: starting estimator thread 0... [ 337.618745][ T7733] IPVS: using max 18 ests per chain, 43200 per kthread [ 341.941597][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 343.242362][ T7772] tipc: Enabled bearer , priority 0 [ 343.412062][ T7772] syzkaller0: entered promiscuous mode [ 343.418131][ T7772] syzkaller0: entered allmulticast mode [ 343.491389][ T7770] tipc: Resetting bearer [ 343.527236][ T7774] overlayfs: missing 'lowerdir' [ 343.594410][ T7770] tipc: Disabling bearer [ 346.400031][ T7806] tipc: Enabled bearer , priority 0 [ 346.454471][ T7806] syzkaller0: entered promiscuous mode [ 346.478176][ T7806] syzkaller0: entered allmulticast mode [ 346.517572][ T7804] tipc: Resetting bearer [ 346.618044][ T7804] tipc: Disabling bearer [ 351.894675][ T7841] tipc: Enabled bearer , priority 0 [ 351.972135][ T7841] syzkaller0: entered promiscuous mode [ 351.984031][ T7841] syzkaller0: entered allmulticast mode [ 352.012075][ T7840] tipc: Resetting bearer [ 352.173865][ T7840] tipc: Disabling bearer [ 352.263887][ T7844] overlayfs: missing 'lowerdir' [ 356.963701][ T7880] tipc: Enabled bearer , priority 0 [ 357.014515][ T7880] syzkaller0: entered promiscuous mode [ 357.043982][ T7880] syzkaller0: entered allmulticast mode [ 357.133492][ T7879] tipc: Resetting bearer [ 357.811807][ T7888] overlayfs: missing 'lowerdir' [ 358.947273][ T7879] tipc: Disabling bearer [ 365.726775][ T7928] overlayfs: missing 'lowerdir' [ 365.838262][ T7934] tipc: Enabled bearer , priority 0 [ 365.912589][ T7934] syzkaller0: entered promiscuous mode [ 365.954691][ T7934] syzkaller0: entered allmulticast mode [ 366.566311][ T7933] tipc: Resetting bearer [ 366.652102][ T7933] tipc: Disabling bearer [ 368.499283][ T7959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.642'. [ 368.541028][ T7962] 9pnet_virtio: no channels available for device syz [ 369.652522][ T7967] tipc: Enabled bearer , priority 0 [ 369.765097][ T7967] syzkaller0: entered promiscuous mode [ 369.830820][ T7967] syzkaller0: entered allmulticast mode [ 369.973395][ T7966] tipc: Resetting bearer [ 370.207695][ T7966] tipc: Disabling bearer [ 371.939781][ T7992] netlink: 56 bytes leftover after parsing attributes in process `syz.0.652'. [ 372.087837][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 372.823142][ T7994] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 372.921388][ T7994] block (null): Could not allocate knbd recv work queue. [ 372.986927][ T7994] nbd: failed to add new device [ 373.331085][ T8004] 9pnet_virtio: no channels available for device syz [ 374.285923][ T8014] tipc: Enabled bearer , priority 0 [ 374.454835][ T8014] syzkaller0: entered promiscuous mode [ 374.473988][ T8014] syzkaller0: entered allmulticast mode [ 374.542286][ T8018] binder_alloc: 8017: binder_alloc_buf size 65792 failed, no address space [ 374.582020][ T8018] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 374.710058][ T8013] tipc: Resetting bearer [ 374.791187][ T8013] tipc: Disabling bearer [ 375.355773][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 375.566287][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 375.629690][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.712521][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.735650][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 375.753859][ T5812] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 375.833982][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.873115][ T5812] usb 2-1: config 0 descriptor?? [ 376.324186][ T8033] 9pnet_virtio: no channels available for device syz [ 376.754838][ T5812] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 376.764694][ T5812] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 376.810808][ T5812] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 377.023369][ T8026] random: crng reseeded on system resumption [ 377.169958][ T5812] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 377.293291][ T5812] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 378.447600][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 378.462037][ T5812] usb 2-1: USB disconnect, device number 2 [ 378.481763][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 378.499066][ T8049] tipc: Enabled bearer , priority 0 [ 378.531937][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 378.568533][ T8049] syzkaller0: entered promiscuous mode [ 378.574066][ T8049] syzkaller0: entered allmulticast mode [ 378.579803][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 378.779950][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.805480][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.591875][ T8048] tipc: Resetting bearer [ 379.713174][ T8048] tipc: Disabling bearer [ 379.797870][ T5757] tipc: Node number set to 1249705279 [ 380.934042][ T8077] 9pnet_virtio: no channels available for device syz [ 382.066090][ T787] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 382.305504][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 382.362885][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.378480][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.388970][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 382.414634][ T787] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 382.447789][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.473914][ T787] usb 4-1: config 0 descriptor?? [ 382.499430][ T8085] tipc: Enabled bearer , priority 0 [ 382.584533][ T8085] syzkaller0: entered promiscuous mode [ 382.615326][ T8085] syzkaller0: entered allmulticast mode [ 382.707552][ T8084] tipc: Resetting bearer [ 382.888804][ T8084] tipc: Disabling bearer [ 382.988864][ T787] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 383.038572][ T787] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 383.075017][ T787] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 383.184510][ T8079] random: crng reseeded on system resumption [ 383.205517][ T787] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 383.267037][ T787] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 384.399923][ T787] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 384.775460][ T787] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 384.786980][ T787] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 384.799124][ T787] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 384.895979][ T5838] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 385.085521][ T5838] usb 4-1: device descriptor read/64, error -32 [ 385.361728][ T5838] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 386.240780][ T787] usb 4-1: USB disconnect, device number 3 [ 386.402466][ T8115] tipc: Enabled bearer , priority 0 [ 386.531943][ T8114] tipc: Disabling bearer [ 389.278491][ T8145] tipc: Enabled bearer , priority 0 [ 389.382725][ T8144] tipc: Disabling bearer [ 391.301354][ T8164] 9pnet_virtio: no channels available for device syz [ 392.036182][ T8177] tipc: Enabled bearer , priority 0 [ 392.106661][ T8176] tipc: Disabling bearer [ 394.863828][ T8200] syzkaller0: entered promiscuous mode [ 394.869746][ T8200] syzkaller0: entered allmulticast mode [ 397.131122][ T8227] 9pnet_virtio: no channels available for device syz [ 397.579072][ T8243] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.669848][ T8243] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.768089][ T8243] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.892640][ T8243] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.230516][ T8243] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.267718][ T8243] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.334777][ T8243] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.369606][ T8243] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.203319][ T8291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.679402][ T8291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.987793][ T8291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.160242][ T8291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.269931][ T8303] 9pnet_virtio: no channels available for device syz [ 404.440334][ T8291] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.487832][ T8291] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.546642][ T8291] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.669085][ T8291] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.175044][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 405.184322][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.757'. [ 405.201080][ T8310] geneve2: entered promiscuous mode [ 405.240220][ T8310] geneve2: entered allmulticast mode [ 405.420983][ T8312] tipc: Enabled bearer , priority 10 [ 409.587993][ T8339] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 410.764929][ T8348] 9pnet_virtio: no channels available for device syz [ 414.288500][ T8364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.412925][ T8364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.608429][ T8364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.760622][ T8364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.985608][ T8364] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.048858][ T8364] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.096120][ T8364] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.133873][ T8364] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.258552][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 415.267775][ T8375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.778'. [ 415.417579][ T8375] geneve2: entered promiscuous mode [ 415.423029][ T8375] geneve2: entered allmulticast mode [ 415.437289][ T8376] tipc: Enabled bearer , priority 10 [ 415.666346][ T8381] input: syz1 as /devices/virtual/input/input11 [ 416.555784][ T5757] tipc: Node number set to 3591342366 [ 416.897615][ T8397] 9pnet_virtio: no channels available for device syz [ 418.098692][ T8406] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 420.733468][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 420.742610][ T8442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'. [ 420.828038][ T8442] geneve2: entered promiscuous mode [ 420.843911][ T8442] geneve2: entered allmulticast mode [ 420.924782][ T8442] tipc: Enabled bearer , priority 10 [ 426.615552][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 427.535274][ T8484] tipc: Enabled bearer , priority 0 [ 427.622668][ T8484] syzkaller0: entered promiscuous mode [ 427.791247][ T8484] syzkaller0: entered allmulticast mode [ 429.531022][ T8483] tipc: Resetting bearer [ 430.003051][ T8499] syz.1.819[8499]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 430.130841][ T8483] tipc: Disabling bearer [ 434.277362][ T8536] tipc: Enabled bearer , priority 0 [ 434.322824][ T8536] syzkaller0: entered promiscuous mode [ 434.323311][ T8538] netlink: 96 bytes leftover after parsing attributes in process `syz.3.832'. [ 434.347243][ T8536] syzkaller0: entered allmulticast mode [ 434.401972][ T8535] tipc: Resetting bearer [ 434.504053][ T8535] tipc: Disabling bearer [ 440.650295][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.671779][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.754025][ T8569] tipc: Enabled bearer , priority 0 [ 440.818358][ T8571] syzkaller0: entered promiscuous mode [ 440.823919][ T8571] syzkaller0: entered allmulticast mode [ 440.896611][ T8573] netlink: 96 bytes leftover after parsing attributes in process `syz.0.841'. [ 441.057992][ T8568] tipc: Resetting bearer [ 441.190777][ T8568] tipc: Disabling bearer [ 444.436620][ T8614] netlink: 96 bytes leftover after parsing attributes in process `syz.0.853'. [ 444.615953][ T8618] fuse: Bad value for 'fd' [ 444.917609][ T8619] Bluetooth: MGMT ver 1.22 [ 445.034072][ T8626] tipc: Enabled bearer , priority 0 [ 445.078414][ T8626] syzkaller0: entered promiscuous mode [ 445.120282][ T8626] syzkaller0: entered allmulticast mode [ 445.197551][ T8625] tipc: Resetting bearer [ 445.276974][ T8625] tipc: Disabling bearer [ 453.371978][ T8689] tipc: Enabled bearer , priority 0 [ 453.390529][ T8689] syzkaller0: entered promiscuous mode [ 453.396308][ T8689] syzkaller0: entered allmulticast mode [ 453.432933][ T8688] tipc: Resetting bearer [ 453.494299][ T8688] tipc: Disabling bearer [ 458.503779][ T8715] tipc: Enabled bearer , priority 0 [ 458.538740][ T8715] syzkaller0: entered promiscuous mode [ 458.544271][ T8715] syzkaller0: entered allmulticast mode [ 458.759118][ T8714] tipc: Resetting bearer [ 458.952913][ T8714] tipc: Disabling bearer [ 463.363753][ T8762] tipc: Enabled bearer , priority 0 [ 463.635912][ T8762] syzkaller0: entered promiscuous mode [ 463.662126][ T8762] syzkaller0: entered allmulticast mode [ 463.762699][ T8761] tipc: Resetting bearer [ 463.913222][ T8761] tipc: Disabling bearer [ 466.993018][ T8778] 9pnet_virtio: no channels available for device syz [ 467.694730][ T8790] tipc: Enabled bearer , priority 0 [ 467.755477][ T8790] syzkaller0: entered promiscuous mode [ 467.763488][ T8790] syzkaller0: entered allmulticast mode [ 467.809685][ T8789] tipc: Resetting bearer [ 467.964904][ T8789] tipc: Disabling bearer [ 475.214825][ T8365] libceph: connect (1)[c::]:6789 error -101 [ 475.222397][ T8365] libceph: mon0 (1)[c::]:6789 connect error [ 475.243583][ T8365] libceph: connect (1)[c::]:6789 error -101 [ 475.271044][ T8365] libceph: mon0 (1)[c::]:6789 connect error [ 475.300667][ T8836] ceph: No mds server is up or the cluster is laggy [ 475.566755][ T8845] 9pnet_virtio: no channels available for device syz [ 476.564802][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'. [ 477.019068][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 477.030161][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 477.219728][ T8861] tipc: Enabled bearer , priority 0 [ 477.249091][ T8861] syzkaller0: entered promiscuous mode [ 477.254631][ T8861] syzkaller0: entered allmulticast mode [ 477.324274][ T8860] tipc: Resetting bearer [ 479.555237][ T8860] tipc: Disabling bearer [ 479.572214][ T5757] tipc: Node number set to 448861938 [ 479.587036][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 479.811652][ T8883] 9pnet_virtio: no channels available for device syz [ 482.047171][ T8904] tipc: Enabled bearer , priority 0 [ 482.104837][ T8904] syzkaller0: entered promiscuous mode [ 482.135736][ T8904] syzkaller0: entered allmulticast mode [ 482.183984][ T8903] tipc: Resetting bearer [ 482.237412][ T8903] tipc: Disabling bearer [ 482.275275][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.949'. [ 483.163477][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 483.163493][ T27] audit: type=1326 audit(1768256570.000:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.3.950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7cf8f749 code=0x0 [ 485.027905][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 485.151508][ T8940] tipc: Enabled bearer , priority 0 [ 485.173182][ T8941] 9pnet_virtio: no channels available for device syz [ 485.185773][ T8940] syzkaller0: entered promiscuous mode [ 485.192760][ T8940] syzkaller0: entered allmulticast mode [ 485.276767][ T8939] tipc: Resetting bearer [ 485.361534][ T8939] tipc: Disabling bearer [ 486.765569][ T8947] tipc: Enabled bearer , priority 0 [ 486.939404][ T8947] syzkaller0: entered promiscuous mode [ 486.976172][ T8947] syzkaller0: entered allmulticast mode [ 487.167344][ T8944] tipc: Resetting bearer [ 487.329994][ T8944] tipc: Disabling bearer [ 487.515268][ T8953] capability: warning: `syz.3.963' uses deprecated v2 capabilities in a way that may be insecure [ 488.346711][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'. [ 488.424091][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 488.450031][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 488.672176][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 489.336558][ T8365] libceph: connect (1)[c::]:6789 error -101 [ 489.353477][ T8365] libceph: mon0 (1)[c::]:6789 connect error [ 489.426647][ T8979] ceph: No mds server is up or the cluster is laggy [ 489.838114][ T8990] 9pnet_virtio: no channels available for device syz [ 490.484773][ T8997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.980'. [ 490.997516][ T9002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.535274][ T27] audit: type=1326 audit(1768256581.090:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.2.983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c9c18f749 code=0x0 [ 495.758312][ C0] ------------[ cut here ]------------ [ 495.763864][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 495.774671][ C0] WARNING: CPU: 0 PID: 16 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 495.784539][ C0] Modules linked in: [ 495.788481][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 495.795812][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.805949][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 495.812301][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 68 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 2b 16 70 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 495.829380][ T9036] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 495.832172][ C0] RSP: 0018:ffffc900001573c0 EFLAGS: 00010246 [ 495.845880][ C0] RAX: c48e7bc351b80100 RBX: 000000000000000c RCX: ffff88801be4da00 [ 495.853946][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 495.862096][ C0] RBP: 0000000000000084 R08: ffffc90000156fc7 R09: 1ffff9200002adf8 [ 495.870250][ C0] R10: dffffc0000000000 R11: fffff5200002adf9 R12: 0000000000000020 [ 495.878364][ C0] R13: dffffc0000000000 R14: ffff88807caf3358 R15: ffff88802cd4c168 [ 495.886463][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 495.895505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.902184][ C0] CR2: 00007f2c9c1c32e0 CR3: 00000000649f5000 CR4: 00000000003506f0 [ 495.910335][ C0] Call Trace: [ 495.913741][ C0] [ 495.916857][ C0] rate_control_send_low+0x194/0x790 [ 495.922252][ C0] rate_control_get_rate+0x20b/0x5c0 [ 495.927911][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 495.933889][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 495.940101][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 495.945635][ C0] ? _local_bh_enable+0xa0/0xa0 [ 495.950646][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 495.956544][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 495.961811][ C0] ? read_lock_is_recursive+0x20/0x20 [ 495.967341][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 495.972989][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 495.978662][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 495.984320][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 495.989949][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 495.996865][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 496.002555][ C0] __iterate_interfaces+0x243/0x500 [ 496.007959][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 496.014356][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 496.021761][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 496.028204][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 496.035461][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 496.040785][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 496.046203][ C0] ? hw_scan_work+0xf40/0xf40 [ 496.051037][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 496.056301][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 496.062489][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 496.067755][ C0] handle_softirqs+0x280/0x820 [ 496.072627][ C0] ? run_ksoftirqd+0x9c/0xf0 [ 496.077513][ C0] ? do_softirq+0x180/0x180 [ 496.082173][ C0] run_ksoftirqd+0x9c/0xf0 [ 496.086788][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 496.092104][ C0] ? takeover_tasklets+0x810/0x810 [ 496.097425][ C0] ? takeover_tasklets+0x810/0x810 [ 496.102668][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 496.108086][ C0] smpboot_thread_fn+0x635/0xa00 [ 496.113155][ C0] ? smpboot_thread_fn+0x50/0xa00 [ 496.118449][ C0] kthread+0x2fa/0x390 [ 496.122643][ C0] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 496.129293][ C0] ? kthread_blkcg+0xd0/0xd0 [ 496.134000][ C0] ret_from_fork+0x48/0x80 [ 496.138584][ C0] ? kthread_blkcg+0xd0/0xd0 [ 496.143296][ C0] ret_from_fork_asm+0x11/0x20 [ 496.148329][ C0] [ 496.151512][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.158832][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 496.166154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.176249][ C0] Call Trace: [ 496.179576][ C0] [ 496.182547][ C0] dump_stack_lvl+0x16c/0x230 [ 496.187274][ C0] ? show_regs_print_info+0x20/0x20 [ 496.192520][ C0] ? load_image+0x3b0/0x3b0 [ 496.197080][ C0] panic+0x2c0/0x710 [ 496.201010][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 496.205567][ C0] ? ret_from_fork_asm+0x11/0x20 [ 496.210554][ C0] __warn+0x2e0/0x470 [ 496.214559][ C0] ? __rate_control_send_low+0x635/0x880 [ 496.220208][ C0] ? __rate_control_send_low+0x635/0x880 [ 496.225940][ C0] report_bug+0x2be/0x4f0 [ 496.230292][ C0] ? __rate_control_send_low+0x635/0x880 [ 496.235974][ C0] ? __rate_control_send_low+0x635/0x880 [ 496.241638][ C0] ? __rate_control_send_low+0x637/0x880 [ 496.247299][ C0] handle_bug+0xcf/0x120 [ 496.251581][ C0] exc_invalid_op+0x1a/0x50 [ 496.256093][ C0] asm_exc_invalid_op+0x1a/0x20 [ 496.260988][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 496.267239][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 68 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 2b 16 70 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 496.286862][ C0] RSP: 0018:ffffc900001573c0 EFLAGS: 00010246 [ 496.292972][ C0] RAX: c48e7bc351b80100 RBX: 000000000000000c RCX: ffff88801be4da00 [ 496.300985][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 496.308967][ C0] RBP: 0000000000000084 R08: ffffc90000156fc7 R09: 1ffff9200002adf8 [ 496.316955][ C0] R10: dffffc0000000000 R11: fffff5200002adf9 R12: 0000000000000020 [ 496.324949][ C0] R13: dffffc0000000000 R14: ffff88807caf3358 R15: ffff88802cd4c168 [ 496.332941][ C0] rate_control_send_low+0x194/0x790 [ 496.338240][ C0] rate_control_get_rate+0x20b/0x5c0 [ 496.343536][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 496.349356][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 496.355360][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 496.360825][ C0] ? _local_bh_enable+0xa0/0xa0 [ 496.365724][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 496.371410][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 496.376581][ C0] ? read_lock_is_recursive+0x20/0x20 [ 496.381996][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 496.387555][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 496.393113][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 496.398703][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 496.404192][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 496.411006][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 496.416601][ C0] __iterate_interfaces+0x243/0x500 [ 496.421845][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 496.428153][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 496.435400][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 496.441655][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 496.448692][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 496.453920][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 496.459229][ C0] ? hw_scan_work+0xf40/0xf40 [ 496.463954][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 496.469103][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 496.475310][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 496.480481][ C0] handle_softirqs+0x280/0x820 [ 496.485281][ C0] ? run_ksoftirqd+0x9c/0xf0 [ 496.489897][ C0] ? do_softirq+0x180/0x180 [ 496.494410][ C0] run_ksoftirqd+0x9c/0xf0 [ 496.498849][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 496.504055][ C0] ? takeover_tasklets+0x810/0x810 [ 496.509176][ C0] ? takeover_tasklets+0x810/0x810 [ 496.514302][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 496.519521][ C0] smpboot_thread_fn+0x635/0xa00 [ 496.524490][ C0] ? smpboot_thread_fn+0x50/0xa00 [ 496.529524][ C0] kthread+0x2fa/0x390 [ 496.533588][ C0] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 496.540010][ C0] ? kthread_blkcg+0xd0/0xd0 [ 496.544600][ C0] ret_from_fork+0x48/0x80 [ 496.549030][ C0] ? kthread_blkcg+0xd0/0xd0 [ 496.553653][ C0] ret_from_fork_asm+0x11/0x20 [ 496.558434][ C0] [ 496.562074][ C0] Kernel Offset: disabled [ 496.566456][ C0] Rebooting in 86400 seconds..