last executing test programs: 17.091250577s ago: executing program 2 (id=78): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) 15.591699005s ago: executing program 2 (id=80): inotify_init() r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040400030300010009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 11.490398189s ago: executing program 2 (id=93): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 10.311712481s ago: executing program 3 (id=94): r0 = socket$kcm(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/34, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000000880)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) 9.911981442s ago: executing program 2 (id=95): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x892}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 8.382738392s ago: executing program 2 (id=98): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 8.259401688s ago: executing program 0 (id=100): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908476d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa66d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65431334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8c8c855ab79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c79a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7960339adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0143fac0662ff86107f998a8ef7df8aa14056c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b333ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) 8.010597301s ago: executing program 3 (id=101): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0xc, 0x1000, 0x204, 0x4576, 0x4, 0x2, 0x4, 0x2}, &(0x7f0000000240)=0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0x4fffffd, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 7.252739301s ago: executing program 0 (id=102): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) fallocate(r1, 0x3, 0x3, 0x8100c60) r2 = getpgid(0xffffffffffffffff) mq_notify(r1, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=r2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x5) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x1115855c) 7.217822293s ago: executing program 1 (id=103): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 6.11227065s ago: executing program 1 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0115000040600000140012800a00010069706f69620000000400028008000500", @ANYRES32=r7, @ANYBLOB="b0238136bfa3d2f039a2b47c5f943a0eda53fb0963324753d42ebe17b24dd3907e"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) 4.615009868s ago: executing program 0 (id=105): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x1b7b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x4, 0xfffff001, 0x9, 0x8000003, 0x20, "3eccd2000500000000000e00"}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8454) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) 3.735796434s ago: executing program 3 (id=106): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, 0x0) 3.447666889s ago: executing program 1 (id=107): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x892}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2.771797345s ago: executing program 0 (id=108): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf160000000000"], 0x0}, 0x94) 2.750545906s ago: executing program 2 (id=109): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_connect$cdc_ecm(0x0, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x8, 0x40, 0x82, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, 'oN'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4ec4, 0x2852, 0x6}, [@country_functional={0x6, 0x24, 0x7, 0x80, 0xcd5e}, @country_functional={0x6, 0x24, 0x7, 0x7}, @obex={0x5, 0x24, 0x15, 0xd}, @mdlm={0x15}, @obex={0x5, 0x24, 0x15, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x10, 0x2, 0x5, 0x1, 0xf9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0xf1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0xcf}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) socket$netlink(0x10, 0x3, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2.419712563s ago: executing program 0 (id=110): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 1.832059014s ago: executing program 3 (id=111): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000042c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 509.752533ms ago: executing program 1 (id=113): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = dup(r0) sendmmsg$inet(r1, 0x0, 0x0, 0x95) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) 327.094842ms ago: executing program 3 (id=114): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(0x0, 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 115.490813ms ago: executing program 3 (id=115): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0x40045542, &(0x7f0000000080)=0x5) 1.625229ms ago: executing program 0 (id=116): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x1b7b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x4, 0xfffff001, 0x9, 0x8000003, 0x20, "3eccd2000500000000000e00"}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) 0s ago: executing program 1 (id=117): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c", 0x18}, {0x0}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 71.382021][ T5758] cgroup: Unknown subsys name 'net' [ 71.546997][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.086807][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.600955][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.609259][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.629588][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.637752][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.645789][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.653358][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.699346][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.707863][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.716192][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.726066][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.735469][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.743256][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.753012][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.789806][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.804920][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.814463][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.821964][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.822710][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.834728][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.843699][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.844839][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.854565][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.870509][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.877889][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.285346][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 75.336565][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 75.381036][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.466985][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 75.507444][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.515133][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.522526][ T5774] bridge_slave_0: entered allmulticast mode [ 75.529710][ T5774] bridge_slave_0: entered promiscuous mode [ 75.571872][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.579015][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.587807][ T5774] bridge_slave_1: entered allmulticast mode [ 75.595735][ T5774] bridge_slave_1: entered promiscuous mode [ 75.632200][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.639485][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.646633][ T5773] bridge_slave_0: entered allmulticast mode [ 75.654668][ T5773] bridge_slave_0: entered promiscuous mode [ 75.697459][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.704813][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.712384][ T5773] bridge_slave_1: entered allmulticast mode [ 75.719325][ T5773] bridge_slave_1: entered promiscuous mode [ 75.729160][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.742684][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.752693][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.760066][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.767241][ T5769] bridge_slave_0: entered allmulticast mode [ 75.774259][ T5769] bridge_slave_0: entered promiscuous mode [ 75.782726][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.789998][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.797148][ T5769] bridge_slave_1: entered allmulticast mode [ 75.804586][ T5769] bridge_slave_1: entered promiscuous mode [ 75.887536][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.900257][ T5774] team0: Port device team_slave_0 added [ 75.908360][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.921180][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.928316][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.935813][ T5777] bridge_slave_0: entered allmulticast mode [ 75.943093][ T5777] bridge_slave_0: entered promiscuous mode [ 75.951767][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.958912][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.966284][ T5777] bridge_slave_1: entered allmulticast mode [ 75.973777][ T5777] bridge_slave_1: entered promiscuous mode [ 75.983236][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.995478][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.006253][ T5774] team0: Port device team_slave_1 added [ 76.073109][ T5769] team0: Port device team_slave_0 added [ 76.090380][ T5769] team0: Port device team_slave_1 added [ 76.107381][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.114721][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.140688][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.153798][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.161124][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.187119][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.209083][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.221709][ T5773] team0: Port device team_slave_0 added [ 76.231211][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.265812][ T5773] team0: Port device team_slave_1 added [ 76.300920][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.307875][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.333945][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.358469][ T5777] team0: Port device team_slave_0 added [ 76.375713][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.383082][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.409150][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.420846][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.427812][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.454590][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.467103][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.474451][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.500619][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.513929][ T5777] team0: Port device team_slave_1 added [ 76.579772][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.586883][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.612925][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.631365][ T5774] hsr_slave_0: entered promiscuous mode [ 76.637771][ T5774] hsr_slave_1: entered promiscuous mode [ 76.661800][ T5769] hsr_slave_0: entered promiscuous mode [ 76.668047][ T5769] hsr_slave_1: entered promiscuous mode [ 76.674732][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.682794][ T5769] Cannot create hsr debugfs directory [ 76.688935][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.696361][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.702110][ T51] Bluetooth: hci0: command tx timeout [ 76.723447][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.771965][ T5773] hsr_slave_0: entered promiscuous mode [ 76.778375][ T5773] hsr_slave_1: entered promiscuous mode [ 76.785157][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.792830][ T5773] Cannot create hsr debugfs directory [ 76.930547][ T51] Bluetooth: hci1: command tx timeout [ 76.936154][ T51] Bluetooth: hci3: command tx timeout [ 76.938108][ T5772] Bluetooth: hci2: command tx timeout [ 76.980250][ T5777] hsr_slave_0: entered promiscuous mode [ 76.986476][ T5777] hsr_slave_1: entered promiscuous mode [ 76.995201][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.002877][ T5777] Cannot create hsr debugfs directory [ 77.254350][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.274406][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.284850][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.295039][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.363983][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.374187][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.392235][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.421810][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.483668][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.499270][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.513179][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.525219][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.620447][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.632207][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.643955][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.654669][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.722863][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.793234][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.815899][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.840042][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.850616][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.857853][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.876441][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.883606][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.937611][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.953342][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.962480][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.982283][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.989472][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.998844][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.006050][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.021565][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.028675][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.052654][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.059844][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.121332][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.144068][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.151234][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.192614][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.199824][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.287131][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.303985][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.318483][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.380629][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.573721][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.702449][ T5774] veth0_vlan: entered promiscuous mode [ 78.732894][ T5774] veth1_vlan: entered promiscuous mode [ 78.770495][ T5772] Bluetooth: hci0: command tx timeout [ 78.813308][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.862568][ T5774] veth0_macvtap: entered promiscuous mode [ 78.875632][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.886881][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.898507][ T5774] veth1_macvtap: entered promiscuous mode [ 78.957552][ T5773] veth0_vlan: entered promiscuous mode [ 78.971659][ T5769] veth0_vlan: entered promiscuous mode [ 78.996970][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.010185][ T5781] Bluetooth: hci3: command tx timeout [ 79.015631][ T5781] Bluetooth: hci1: command tx timeout [ 79.021317][ T5772] Bluetooth: hci2: command tx timeout [ 79.045114][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.055918][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067708][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.077347][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086456][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.103629][ T5773] veth1_vlan: entered promiscuous mode [ 79.115284][ T5769] veth1_vlan: entered promiscuous mode [ 79.155843][ T5777] veth0_vlan: entered promiscuous mode [ 79.188089][ T5777] veth1_vlan: entered promiscuous mode [ 79.206782][ T5769] veth0_macvtap: entered promiscuous mode [ 79.273200][ T5769] veth1_macvtap: entered promiscuous mode [ 79.284321][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.311119][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.323657][ T5773] veth0_macvtap: entered promiscuous mode [ 79.339178][ T5773] veth1_macvtap: entered promiscuous mode [ 79.365050][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.376278][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.387926][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.399107][ T5777] veth0_macvtap: entered promiscuous mode [ 79.415676][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.425436][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.432515][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.450857][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.462679][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.474777][ T5777] veth1_macvtap: entered promiscuous mode [ 79.499021][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.513908][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.523211][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.532034][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555282][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.574844][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.586181][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.599124][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.622060][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.669888][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.719407][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.729315][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.740906][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.752397][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.760743][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.772464][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.783900][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.794476][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.804729][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.818327][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.830482][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.873761][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.885702][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.896016][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.905321][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.918452][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.941369][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.953564][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.966306][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.987381][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.003368][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.014912][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.036430][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.057294][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.066196][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.075536][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.140559][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.148500][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.265839][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.290957][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.397870][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.421740][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.448002][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.464290][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.550911][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.570473][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.635860][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.650759][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.851534][ T5772] Bluetooth: hci0: command tx timeout [ 81.079293][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.100630][ T5772] Bluetooth: hci2: command tx timeout [ 81.106086][ T5772] Bluetooth: hci3: command tx timeout [ 81.112384][ T5772] Bluetooth: hci1: command tx timeout [ 82.194087][ T5866] kernel profiling enabled (shift: 9) [ 82.831259][ T5865] tty tty2: ldisc open failed (-12), clearing slot 1 [ 82.930818][ T5781] Bluetooth: hci0: command tx timeout [ 83.131865][ T5874] tipc: Started in network mode [ 83.136981][ T5874] tipc: Node identity b688696783f6, cluster identity 4711 [ 83.169728][ T5781] Bluetooth: hci1: command tx timeout [ 83.175310][ T5772] Bluetooth: hci3: command tx timeout [ 83.175320][ T51] Bluetooth: hci2: command tx timeout [ 83.176135][ T5874] tipc: Enabled bearer , priority 0 [ 83.240149][ T5879] syzkaller0: entered promiscuous mode [ 83.249798][ T5825] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.264766][ T5879] syzkaller0: entered allmulticast mode [ 83.349856][ T5880] serio: Serial port ptm0 [ 83.360197][ T5874] tipc: Resetting bearer [ 83.374298][ T5873] tipc: Resetting bearer [ 83.415874][ T5873] tipc: Disabling bearer [ 85.480736][ T5904] capability: warning: `syz.3.18' uses 32-bit capabilities (legacy support in use) [ 85.572629][ T5905] syz.3.18[5905]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.082635][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.095046][ T5825] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 86.103194][ T5825] usb 1-1: can't read configurations, error -71 [ 86.490374][ T5914] tipc: Started in network mode [ 86.495310][ T5914] tipc: Node identity cae25607153b, cluster identity 4711 [ 86.515404][ T5914] tipc: Enabled bearer , priority 0 [ 86.549921][ T5914] syzkaller0: entered promiscuous mode [ 86.555509][ T5914] syzkaller0: entered allmulticast mode [ 86.628600][ T5914] tipc: Resetting bearer [ 86.670710][ T5913] tipc: Resetting bearer [ 86.713191][ T1189] cfg80211: failed to load regulatory.db [ 86.748261][ T5913] tipc: Disabling bearer [ 87.629546][ T5825] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.840819][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 88.181322][ T5825] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 88.239498][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.247546][ T5825] usb 4-1: Product: syz [ 88.265797][ T5825] usb 4-1: Manufacturer: syz [ 88.274502][ T5825] usb 4-1: SerialNumber: syz [ 88.503205][ T5825] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 88.538773][ T5825] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.567256][ T5825] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 88.583049][ T5825] usb 4-1: media controller created [ 88.656622][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.917812][ T5825] zl10353_read_register: readreg error (reg=127, ret==-71) [ 89.047899][ T5825] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 89.088521][ T5825] usb 4-1: USB disconnect, device number 2 [ 89.276924][ T5953] block device autoloading is deprecated and will be removed. [ 89.601974][ T5959] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 90.569557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.304260][ T5781] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 92.315948][ T5781] CPU: 1 PID: 5781 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 92.323546][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.333639][ T5781] Workqueue: hci0 hci_rx_work [ 92.338388][ T5781] Call Trace: [ 92.341720][ T5781] [ 92.344671][ T5781] dump_stack_lvl+0x18c/0x250 [ 92.349391][ T5781] ? show_regs_print_info+0x20/0x20 [ 92.354628][ T5781] ? load_image+0x420/0x420 [ 92.359161][ T5781] sysfs_create_dir_ns+0x26e/0x2a0 [ 92.364429][ T5781] ? sysfs_warn_dup+0xa0/0xa0 [ 92.369157][ T5781] ? do_raw_spin_unlock+0x121/0x230 [ 92.374398][ T5781] kobject_add_internal+0x61c/0xcc0 [ 92.379635][ T5781] kobject_add+0x164/0x240 [ 92.384076][ T5781] ? __rwlock_init+0x150/0x150 [ 92.388887][ T5781] ? kobject_init+0x1e0/0x1e0 [ 92.393585][ T5781] ? _raw_spin_unlock+0x28/0x40 [ 92.398457][ T5781] ? get_device_parent+0x366/0x390 [ 92.403629][ T5781] device_add+0x408/0xc20 [ 92.407994][ T5781] hci_conn_add_sysfs+0xd5/0x1e0 [ 92.412964][ T5781] le_conn_complete_evt+0xf5d/0x1540 [ 92.418281][ T5781] ? hci_event_packet+0x4cb/0x1270 [ 92.423424][ T5781] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 92.429693][ T5781] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 92.435349][ T5781] ? skb_pull_data+0xfb/0x200 [ 92.440073][ T5781] hci_le_conn_complete_evt+0x187/0x440 [ 92.445642][ T5781] ? hci_remote_host_features_evt+0x150/0x150 [ 92.451734][ T5781] hci_event_packet+0x7ba/0x1270 [ 92.456725][ T5781] ? bis_list+0x290/0x290 [ 92.461118][ T5781] ? lockdep_hardirqs_on+0x98/0x150 [ 92.466344][ T5781] ? hci_send_to_monitor+0xd7/0x4f0 [ 92.471558][ T5781] hci_rx_work+0x43a/0xd60 [ 92.476013][ T5781] ? process_scheduled_works+0x96f/0x15d0 [ 92.481753][ T5781] process_scheduled_works+0xa5d/0x15d0 [ 92.487339][ T5781] ? worker_attach_to_pool+0x380/0x380 [ 92.492923][ T5781] ? assign_work+0x3d2/0x5d0 [ 92.497554][ T5781] worker_thread+0xa55/0xfc0 [ 92.502185][ T5781] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 92.508092][ T5781] ? _raw_spin_unlock+0x40/0x40 [ 92.512960][ T5781] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 92.518908][ T5781] kthread+0x2fa/0x390 [ 92.523007][ T5781] ? pr_cont_work+0x560/0x560 [ 92.527705][ T5781] ? kthread_blkcg+0xd0/0xd0 [ 92.532331][ T5781] ret_from_fork+0x48/0x80 [ 92.536781][ T5781] ? kthread_blkcg+0xd0/0xd0 [ 92.541409][ T5781] ret_from_fork_asm+0x11/0x20 [ 92.546212][ T5781] [ 92.556311][ T5781] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.572568][ T5781] Bluetooth: hci0: failed to register connection device [ 94.859381][ C1] sched: RT throttling activated [ 96.894012][ T6006] mmap: syz.1.50 (6006) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.809670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.003623][ T6034] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 105.013768][ T6034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 105.023361][ T6034] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 105.100354][ T6034] syz.3.59 (6034) used greatest stack depth: 20584 bytes left [ 105.108524][ T27] audit: type=1800 audit(1777072159.628:2): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.59" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 107.029496][ T5770] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.262775][ T5770] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 107.271065][ T5770] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.291160][ T5770] usb 2-1: config 0 has no interface number 0 [ 107.314227][ T5770] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 107.323474][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.377945][ T5770] usb 2-1: Product: syz [ 107.398447][ T5770] usb 2-1: Manufacturer: syz [ 107.406920][ T5770] usb 2-1: SerialNumber: syz [ 107.483135][ T5770] usb 2-1: config 0 descriptor?? [ 107.609493][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.812291][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 107.820750][ T5837] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 107.828954][ T5837] usb 3-1: config 0 has no interface number 0 [ 107.840073][ T5837] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.854262][ T5837] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.865543][ T5837] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.885153][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 107.903475][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.916147][ T5837] usb 3-1: config 0 descriptor?? [ 108.103228][ T5155] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.292561][ T5155] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.302886][ T5155] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.313107][ T5155] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.322275][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.331198][ T5155] usb 4-1: SerialNumber: syz [ 108.354161][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.366371][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.376847][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.385427][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.394841][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.403433][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.411794][ T5837] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 108.427938][ T5837] logitech-djreceiver 0003:046D:C537.0001: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.2-1/input4 [ 108.595208][ T5770] usb 3-1: USB disconnect, device number 2 [ 108.665075][ T5155] usb 4-1: 0:2 : does not exist [ 108.743627][ T5155] usb 4-1: USB disconnect, device number 3 [ 108.848518][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.905674][ T5837] usb 2-1: USB disconnect, device number 2 [ 110.640086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.649465][ T5770] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.459382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.489438][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 112.501408][ T5770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.520936][ T5770] usb 3-1: config 120 has an invalid interface number: 86 but max is 0 [ 112.529241][ T5770] usb 3-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 112.559407][ T5770] usb 3-1: config 120 has no interface number 0 [ 112.569663][ T5770] usb 3-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 112.589034][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.598074][ T5770] usb 3-1: Product: syz [ 112.609398][ T5770] usb 3-1: Manufacturer: syz [ 112.614156][ T5770] usb 3-1: SerialNumber: syz [ 112.733821][ T5770] usb 3-1: USB disconnect, device number 3 [ 113.267446][ T5770] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 113.296302][ T5770] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 113.403718][ T5770] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 113.609402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 114.585706][ T6108] fido_id[6108]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.711421][ T6113] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.776839][ T6114] bridge_slave_0: left allmulticast mode [ 114.789298][ T6114] bridge_slave_0: left promiscuous mode [ 114.797139][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.825429][ T6114] bridge_slave_1: left allmulticast mode [ 114.834721][ T6114] bridge_slave_1: left promiscuous mode [ 114.844136][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.863672][ T6114] bond0: (slave bond_slave_0): Releasing backup interface [ 114.942550][ T6114] bond0: (slave bond_slave_1): Releasing backup interface [ 115.018751][ T6114] team0: Port device team_slave_0 removed [ 115.077978][ T6114] team0: Port device team_slave_1 removed [ 115.096796][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.120017][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.135415][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.143146][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.870114][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.886530][ T6113] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 115.915361][ T6113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.102266][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 116.355511][ T5825] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 116.539093][ T5825] usb 3-1: config 0 has no interface number 0 [ 117.044820][ T5825] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.060808][ T5825] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.070970][ T5825] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 117.084099][ T5825] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 117.098745][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.118192][ T5825] usb 3-1: config 0 descriptor?? [ 117.744151][ T5825] usbhid 3-1:0.4: can't add hid device: -71 [ 117.852104][ T5825] usbhid: probe of 3-1:0.4 failed with error -71 [ 118.060762][ T5825] usb 3-1: USB disconnect, device number 4 [ 118.366730][ T5890] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.392709][ T5890] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.421591][ T5890] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 120.168655][ T6155] fido_id[6155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.792562][ T5772] Bluetooth: hci3: link tx timeout [ 120.798113][ T5772] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.379936][ T5772] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 121.388770][ T5772] Bluetooth: hci0: Injecting HCI hardware error event [ 121.399050][ T51] Bluetooth: hci0: hardware error 0x00 [ 122.049859][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.339495][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 122.382843][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 122.429876][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.568703][ T5155] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 122.654508][ T5890] pvrusb2: Hardware description: Terratec Grabster AV400 [ 122.665565][ T5890] pvrusb2: ********** [ 122.861038][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 122.919672][ T5890] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 122.932450][ T5890] pvrusb2: Important functionality might not be entirely working. [ 122.944932][ T5890] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 122.970814][ T5890] pvrusb2: ********** [ 123.730816][ T2321] pvrusb2: Invalid write control endpoint [ 123.759469][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 125.154230][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.178985][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.375347][ T2174] usb 3-1: USB disconnect, device number 5 [ 125.385757][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.397478][ T2321] pvrusb2: Invalid write control endpoint [ 125.418836][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 126.245459][ T5155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.276599][ T5155] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 126.355546][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 126.394929][ T5155] usb 4-1: can't read configurations, error -71 [ 126.581790][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.126642][ T2321] pvrusb2: Device being rendered inoperable [ 127.139688][ T6208] fido_id[6208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.147370][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.147502][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 127.160118][ T2321] pvrusb2: Attached sub-driver cx25840 [ 127.223348][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.235105][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.875049][ T2174] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.041228][ T6221] random: crng reseeded on system resumption [ 128.359572][ T2174] usb 3-1: Using ep0 maxpacket: 8 [ 129.349586][ T2174] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 129.357044][ T2174] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 129.370165][ T2174] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.382451][ T2174] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 129.394828][ T2174] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 129.507480][ T2174] usb 3-1: config 168 interface 0 has no altsetting 0 [ 129.520807][ T2174] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 129.528259][ T2174] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 129.559453][ T2174] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.579464][ T2174] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 129.605138][ T2174] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 129.630563][ T2174] usb 3-1: config 168 interface 0 has no altsetting 0 [ 129.645258][ T2174] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 129.659550][ T2174] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 129.681716][ T2174] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.707182][ T2174] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 129.750985][ T2174] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 129.797280][ T2174] usb 3-1: config 168 interface 0 has no altsetting 0 [ 129.807844][ T2174] usb 3-1: string descriptor 0 read error: -22 [ 129.819551][ T2174] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.879460][ T2174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.953816][ T2174] adutux 3-1:168.0: interrupt endpoints not found [ 131.529794][ C1] ------------[ cut here ]------------ [ 131.529905][ C1] WARNING: CPU: 1 PID: 6250 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 131.529966][ C1] Modules linked in: [ 131.529996][ C1] CPU: 1 PID: 6250 Comm: syz.3.115 Not tainted syzkaller #0 [ 131.530031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.530045][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 131.530076][ C1] Code: 24 4c 89 e7 e8 de 8c c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 d9 ca 82 f7 0f 0b e9 f6 f7 ff ff e8 cd ca 82 f7 <0f> 0b e9 48 fb ff ff e8 c1 ca 82 f7 48 c7 c7 00 86 64 8e 4c 89 e6 [ 131.530095][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 131.530118][ C1] RAX: ffffffff8a045733 RBX: ffffffff8a044536 RCX: ffff88802d5a5a00 [ 131.530135][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.530150][ C1] RBP: 0000000000000000 R08: ffff88802d5a5a00 R09: 0000000000000003 [ 131.530165][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bac23c0 [ 131.530181][ C1] R13: dffffc0000000000 R14: ffff88805bac28b0 R15: ffff88805c4ecc24 [ 131.530199][ C1] FS: 00007f861bc066c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 131.530219][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.530235][ C1] CR2: 000000110c3a9fa8 CR3: 0000000074c2d000 CR4: 00000000003526e0 [ 131.530255][ C1] Call Trace: [ 131.530264][ C1] [ 131.530277][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 131.530316][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 131.530358][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 131.530400][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 131.530436][ C1] __iterate_interfaces+0x243/0x500 [ 131.530469][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.530496][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 131.530532][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.530559][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 131.530598][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 131.530626][ C1] __hrtimer_run_queues+0x520/0xc40 [ 131.530651][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 131.530687][ C1] ? hw_scan_work+0xf60/0xf60 [ 131.530719][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 131.530743][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 131.530781][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 131.530811][ C1] handle_softirqs+0x280/0x820 [ 131.530839][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 131.530868][ C1] ? do_softirq+0x1a0/0x1a0 [ 131.530905][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 131.530936][ C1] __irq_exit_rcu+0xd3/0x190 [ 131.530958][ C1] ? irq_exit_rcu+0x20/0x20 [ 131.530987][ C1] irq_exit_rcu+0x9/0x20 [ 131.531007][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 131.531032][ C1] [ 131.531040][ C1] [ 131.531049][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.531076][ C1] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 131.531097][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 51 f6 cd f6 e8 7c 03 ff f6 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 131.531113][ C1] RSP: 0018:ffffc9000c05ef00 EFLAGS: 00000286 [ 131.531133][ C1] RAX: 358b429cab4e2500 RBX: 0000000000000000 RCX: 358b429cab4e2500 [ 131.531148][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 131.531163][ C1] RBP: ffffc9000c05efb0 R08: ffffffff911c5507 R09: 1ffffffff2238aa0 [ 131.531179][ C1] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 0000000000000000 [ 131.531194][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200180bde0 [ 131.531226][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 131.531248][ C1] ? lock_chain_count+0x20/0x20 [ 131.531277][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 131.531308][ C1] irqentry_exit+0x67/0x70 [ 131.531331][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.531362][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x30/0x90 [ 131.531390][ C1] Code: 04 24 65 48 8b 15 00 90 7c 7e 65 8b 0d 01 90 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 <8b> 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 131.531407][ C1] RSP: 0018:ffffc9000c05f078 EFLAGS: 00000246 [ 131.531426][ C1] RAX: ffffffff8475f6d6 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.531440][ C1] RDX: ffff88802d5a5a00 RSI: 0000000000000000 RDI: 0000000000000010 [ 131.531455][ C1] RBP: ffffc9000c05f200 R08: ffff888021b6111b R09: 0000000000000003 [ 131.531469][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000330 [ 131.531483][ C1] R13: 1ffff1100436c223 R14: 0000000000000340 R15: dffffc0000000000 [ 131.531506][ C1] ? sys_imageblit+0x19e6/0x23b0 [ 131.531536][ C1] sys_imageblit+0x19e6/0x23b0 [ 131.531574][ C1] ? sys_copyarea+0x2520/0x2520 [ 131.531604][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.531659][ C1] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 131.531696][ C1] bit_putcs+0x1863/0x1bf0 [ 131.531759][ C1] ? bit_clear+0x1f0/0x1f0 [ 131.531788][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 131.531813][ C1] ? fb_get_color_depth+0x162/0x280 [ 131.531848][ C1] fbcon_putcs+0x35c/0x520 [ 131.531884][ C1] ? bit_clear+0x1f0/0x1f0 [ 131.531908][ C1] do_update_region+0x4ab/0x620 [ 131.531938][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.531976][ C1] ? hide_cursor+0x320/0x320 [ 131.532005][ C1] ? reset_terminal+0x5d0/0x960 [ 131.532037][ C1] ? __asan_memcpy+0x40/0x70 [ 131.532073][ C1] csi_J+0xa1b/0xe80 [ 131.532110][ C1] do_con_write+0x3836/0x6e50 [ 131.532197][ C1] ? vt_resize+0xc0/0xc0 [ 131.532227][ C1] ? mark_lock+0x94/0x320 [ 131.532267][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 131.532294][ C1] ? lock_chain_count+0x20/0x20 [ 131.532323][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.532354][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 131.532380][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.532413][ C1] ? n_tty_write+0x8ac/0x11e0 [ 131.532436][ C1] con_write+0x24/0x40 [ 131.532466][ C1] n_tty_write+0xd34/0x11e0 [ 131.532507][ C1] ? n_tty_read+0x1390/0x1390 [ 131.532527][ C1] ? wait_woken+0x180/0x180 [ 131.532553][ C1] ? __virt_addr_valid+0x469/0x540 [ 131.532581][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 131.532607][ C1] ? __check_object_size+0x506/0xa20 [ 131.532631][ C1] ? n_tty_read+0x1390/0x1390 [ 131.532649][ C1] file_tty_write+0x54b/0x980 [ 131.532686][ C1] vfs_write+0x46c/0x990 [ 131.532720][ C1] ? file_end_write+0x250/0x250 [ 131.532752][ C1] ? __fget_files+0x43d/0x4b0 [ 131.532789][ C1] ? __fdget_pos+0x1d8/0x330 [ 131.532815][ C1] ? ksys_write+0x75/0x260 [ 131.532845][ C1] ksys_write+0x150/0x260 [ 131.532875][ C1] ? __ia32_sys_read+0x90/0x90 [ 131.532907][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 131.532935][ C1] do_syscall_64+0x55/0xa0 [ 131.532954][ C1] ? clear_bhb_loop+0x40/0x90 [ 131.532979][ C1] ? clear_bhb_loop+0x40/0x90 [ 131.533006][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.533049][ C1] RIP: 0033:0x7f861ad9cdd9 [ 131.533073][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.533091][ C1] RSP: 002b:00007f861bc06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.533115][ C1] RAX: ffffffffffffffda RBX: 00007f861b016270 RCX: 00007f861ad9cdd9 [ 131.533132][ C1] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000008 [ 131.533147][ C1] RBP: 00007f861ae32d69 R08: 0000000000000000 R09: 0000000000000000 [ 131.533161][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.533175][ C1] R13: 00007f861b016308 R14: 00007f861b016270 R15: 00007ffcb0d41ae8 [ 131.533208][ C1] [ 131.533219][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.533229][ C1] CPU: 1 PID: 6250 Comm: syz.3.115 Not tainted syzkaller #0 [ 131.533249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.533259][ C1] Call Trace: [ 131.533266][ C1] [ 131.533274][ C1] dump_stack_lvl+0x18c/0x250 [ 131.533322][ C1] ? show_regs_print_info+0x20/0x20 [ 131.533379][ C1] ? load_image+0x420/0x420 [ 131.533421][ C1] panic+0x2dc/0x730 [ 131.533453][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 131.533496][ C1] __warn+0x2e0/0x470 [ 131.533520][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 131.533550][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 131.533577][ C1] report_bug+0x2be/0x4f0 [ 131.533599][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 131.533627][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 131.533654][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 131.533681][ C1] handle_bug+0xcf/0x120 [ 131.533702][ C1] exc_invalid_op+0x1a/0x50 [ 131.533723][ C1] asm_exc_invalid_op+0x1a/0x20 [ 131.533747][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 131.533775][ C1] Code: 24 4c 89 e7 e8 de 8c c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 d9 ca 82 f7 0f 0b e9 f6 f7 ff ff e8 cd ca 82 f7 <0f> 0b e9 48 fb ff ff e8 c1 ca 82 f7 48 c7 c7 00 86 64 8e 4c 89 e6 [ 131.533792][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 131.533810][ C1] RAX: ffffffff8a045733 RBX: ffffffff8a044536 RCX: ffff88802d5a5a00 [ 131.533826][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.533839][ C1] RBP: 0000000000000000 R08: ffff88802d5a5a00 R09: 0000000000000003 [ 131.533852][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bac23c0 [ 131.533866][ C1] R13: dffffc0000000000 R14: ffff88805bac28b0 R15: ffff88805c4ecc24 [ 131.533886][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 131.533915][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 131.533948][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 131.533977][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 131.534013][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 131.534045][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 131.534086][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 131.534119][ C1] __iterate_interfaces+0x243/0x500 [ 131.534151][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.534177][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 131.534212][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.534238][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 131.534277][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 131.534303][ C1] __hrtimer_run_queues+0x520/0xc40 [ 131.534326][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 131.534366][ C1] ? hw_scan_work+0xf60/0xf60 [ 131.534397][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 131.534421][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 131.534457][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 131.534486][ C1] handle_softirqs+0x280/0x820 [ 131.534513][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 131.534552][ C1] ? do_softirq+0x1a0/0x1a0 [ 131.534577][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 131.534609][ C1] __irq_exit_rcu+0xd3/0x190 [ 131.534630][ C1] ? irq_exit_rcu+0x20/0x20 [ 131.534659][ C1] irq_exit_rcu+0x9/0x20 [ 131.534678][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 131.534703][ C1] [ 131.534709][ C1] [ 131.534717][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.534743][ C1] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 131.534763][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 51 f6 cd f6 e8 7c 03 ff f6 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 131.534779][ C1] RSP: 0018:ffffc9000c05ef00 EFLAGS: 00000286 [ 131.534796][ C1] RAX: 358b429cab4e2500 RBX: 0000000000000000 RCX: 358b429cab4e2500 [ 131.534810][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 131.534824][ C1] RBP: ffffc9000c05efb0 R08: ffffffff911c5507 R09: 1ffffffff2238aa0 [ 131.534839][ C1] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 0000000000000000 [ 131.534853][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200180bde0 [ 131.534885][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 131.534906][ C1] ? lock_chain_count+0x20/0x20 [ 131.534935][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 131.534966][ C1] irqentry_exit+0x67/0x70 [ 131.534989][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.535014][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x30/0x90 [ 131.535040][ C1] Code: 04 24 65 48 8b 15 00 90 7c 7e 65 8b 0d 01 90 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 <8b> 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 131.535056][ C1] RSP: 0018:ffffc9000c05f078 EFLAGS: 00000246 [ 131.535073][ C1] RAX: ffffffff8475f6d6 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.535086][ C1] RDX: ffff88802d5a5a00 RSI: 0000000000000000 RDI: 0000000000000010 [ 131.535099][ C1] RBP: ffffc9000c05f200 R08: ffff888021b6111b R09: 0000000000000003 [ 131.535113][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000330 [ 131.535125][ C1] R13: 1ffff1100436c223 R14: 0000000000000340 R15: dffffc0000000000 [ 131.535147][ C1] ? sys_imageblit+0x19e6/0x23b0 [ 131.535177][ C1] sys_imageblit+0x19e6/0x23b0 [ 131.535215][ C1] ? sys_copyarea+0x2520/0x2520 [ 131.535245][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.535280][ C1] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 131.535313][ C1] bit_putcs+0x1863/0x1bf0 [ 131.535379][ C1] ? bit_clear+0x1f0/0x1f0 [ 131.535406][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 131.535430][ C1] ? fb_get_color_depth+0x162/0x280 [ 131.535463][ C1] fbcon_putcs+0x35c/0x520 [ 131.535496][ C1] ? bit_clear+0x1f0/0x1f0 [ 131.535518][ C1] do_update_region+0x4ab/0x620 [ 131.535546][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.535582][ C1] ? hide_cursor+0x320/0x320 [ 131.535609][ C1] ? reset_terminal+0x5d0/0x960 [ 131.535639][ C1] ? __asan_memcpy+0x40/0x70 [ 131.535672][ C1] csi_J+0xa1b/0xe80 [ 131.535707][ C1] do_con_write+0x3836/0x6e50 [ 131.535792][ C1] ? vt_resize+0xc0/0xc0 [ 131.535820][ C1] ? mark_lock+0x94/0x320 [ 131.535847][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 131.535875][ C1] ? lock_chain_count+0x20/0x20 [ 131.535903][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.535929][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 131.535955][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.535988][ C1] ? n_tty_write+0x8ac/0x11e0 [ 131.536011][ C1] con_write+0x24/0x40 [ 131.536063][ C1] n_tty_write+0xd34/0x11e0 [ 131.536105][ C1] ? n_tty_read+0x1390/0x1390 [ 131.536125][ C1] ? wait_woken+0x180/0x180 [ 131.536152][ C1] ? __virt_addr_valid+0x469/0x540 [ 131.536181][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 131.536207][ C1] ? __check_object_size+0x506/0xa20 [ 131.536232][ C1] ? n_tty_read+0x1390/0x1390 [ 131.536249][ C1] file_tty_write+0x54b/0x980 [ 131.536288][ C1] vfs_write+0x46c/0x990 [ 131.536323][ C1] ? file_end_write+0x250/0x250 [ 131.536364][ C1] ? __fget_files+0x43d/0x4b0 [ 131.536402][ C1] ? __fdget_pos+0x1d8/0x330 [ 131.536428][ C1] ? ksys_write+0x75/0x260 [ 131.536460][ C1] ksys_write+0x150/0x260 [ 131.536492][ C1] ? __ia32_sys_read+0x90/0x90 [ 131.536525][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 131.536554][ C1] do_syscall_64+0x55/0xa0 [ 131.536573][ C1] ? clear_bhb_loop+0x40/0x90 [ 131.536598][ C1] ? clear_bhb_loop+0x40/0x90 [ 131.536627][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.536652][ C1] RIP: 0033:0x7f861ad9cdd9 [ 131.536669][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.536685][ C1] RSP: 002b:00007f861bc06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.536706][ C1] RAX: ffffffffffffffda RBX: 00007f861b016270 RCX: 00007f861ad9cdd9 [ 131.536721][ C1] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000008 [ 131.536735][ C1] RBP: 00007f861ae32d69 R08: 0000000000000000 R09: 0000000000000000 [ 131.536748][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.536761][ C1] R13: 00007f861b016308 R14: 00007f861b016270 R15: 00007ffcb0d41ae8 [ 131.536792][ C1] [ 131.537372][ C1] Kernel Offset: disabled