last executing test programs: 4.855980533s ago: executing program 1 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x24, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0x7, 0x88, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0xa, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x1}]}, @generic={0x7, 0xf, "1025c07c16c61c92654dbef6c9"}, @rr={0x7, 0x13, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @broadcast]}, @end, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x7, 0xa, "4028b15bc512b56f"}, {0x5, 0x11, "efcacc941696c2dbf6141e9f4b8481"}, {0x7, 0x4, 'Y='}, {0x7, 0x5, "963c17"}, {0x7, 0xb, "1a44df30cca281c4b5"}, {0x4, 0x6, "fff01156"}]}, @ssrr={0x89, 0x7, 0xdb, [@local]}]}}}}}, 0xba) 4.648880906s ago: executing program 1 (id=13): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_disconnect(r0) 4.280212475s ago: executing program 0 (id=19): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fd8fdf250200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990009000000190000000800270002000000080026008009"], 0x40}}, 0x20000000) 4.171706194s ago: executing program 0 (id=20): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 3.996783009s ago: executing program 0 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x38}}, 0x0) 3.95837569s ago: executing program 0 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2918e883b01d34d4}, 0x4804) 3.218847188s ago: executing program 2 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x0) 3.124514889s ago: executing program 2 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) 3.033342342s ago: executing program 0 (id=26): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000010040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf76e08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed", 0xce}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.973926907s ago: executing program 1 (id=27): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) 2.973407953s ago: executing program 2 (id=28): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.749807824s ago: executing program 1 (id=31): syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[], 0x1e) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) mq_open(0x0, 0x800, 0x1b4, &(0x7f0000000340)={0x7, 0x0, 0xffffffffffffffff, 0x7}) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000140)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="f8de1bba6549", {0x4}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x6, @default, 0xc125, @val={0x0, 0x17, @random="a3e0ca3aea8f852a3907fb5add237c8a0af466bf7af4c2"}, @val={0x1, 0x8, [{0x79}, {0x1b, 0x1}, {0x1}, {0x24, 0x1}, {0x1b}, {0x3f, 0x1}, {0x3e}, {0x60}]}, @val={0x3, 0x1, 0xa5}, @void, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x38}}, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x3, 0xa, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x806, 0xe5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7, 0x60}}, @val={0x76, 0x6, {0x40, 0x1, 0x1d, 0x8}}, [{0xdd, 0x13, "9d66e3f567f953eb03f8574d32c271d70a3b46"}, {0xdd, 0x6, "3309fb14184d"}]}, 0xad) syz_80211_inject_frame(0x0, 0x0, 0x20) 2.162596914s ago: executing program 1 (id=33): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.517736147s ago: executing program 0 (id=34): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 861.4519ms ago: executing program 2 (id=41): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) 861.076578ms ago: executing program 3 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x240080d0) 826.557067ms ago: executing program 3 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000fedbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="47000e0080000000080211000001ffffffffffff4d8e505a6882000000000000000000000400000000060101010101013c0401073c0271070204000101f0087606030416000300000500a2000100000008000c006400000008000d00"], 0x7c}}, 0x0) 812.906035ms ago: executing program 2 (id=44): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 704.987342ms ago: executing program 1 (id=45): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3d, &(0x7f0000000bc0)=@string={0x3d, 0x3, "b9aa5bf0bb14508e61bc234dfa096b1b8638648c575ce1dc5c6adc512d99bb44a71c9981c70b5131f88ade1a16c3b4ecd32be727937bc0ba825c07"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 704.637779ms ago: executing program 3 (id=46): syz_80211_inject_frame(0x0, 0x0, 0x1e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 688.247248ms ago: executing program 2 (id=47): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x20, 0x11, 0x5, "0317f2616b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 105.626885ms ago: executing program 3 (id=48): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000200)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x9d}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1000}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xae}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 9.757144ms ago: executing program 3 (id=49): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x2c, r2, 0x1, 0x70b926, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 3 (id=50): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000019, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. [ 68.428124][ T5819] cgroup: Unknown subsys name 'net' [ 68.504651][ T5819] cgroup: Unknown subsys name 'cpuset' [ 68.512874][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.866812][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.444804][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.451772][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.068840][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.077263][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.085492][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.094842][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.117012][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.125023][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.143275][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.151646][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.160198][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.167858][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.238790][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.246577][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.257692][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.266225][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.274543][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.283116][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.290795][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.298970][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.307064][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.315062][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.627211][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.784345][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.792760][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.800030][ T5835] bridge_slave_0: entered allmulticast mode [ 73.807228][ T5835] bridge_slave_0: entered promiscuous mode [ 73.835218][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.861649][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.869202][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.876432][ T5835] bridge_slave_1: entered allmulticast mode [ 73.883637][ T5835] bridge_slave_1: entered promiscuous mode [ 73.944863][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.980665][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.047920][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.055601][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.062977][ T5830] bridge_slave_0: entered allmulticast mode [ 74.070195][ T5830] bridge_slave_0: entered promiscuous mode [ 74.101215][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.108549][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.115686][ T5830] bridge_slave_1: entered allmulticast mode [ 74.122976][ T5830] bridge_slave_1: entered promiscuous mode [ 74.130122][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 74.143675][ T5835] team0: Port device team_slave_0 added [ 74.152293][ T5835] team0: Port device team_slave_1 added [ 74.243364][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.256402][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.280883][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.287853][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.313955][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.339287][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 74.357309][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.364313][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.390261][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.449145][ T5830] team0: Port device team_slave_0 added [ 74.494698][ T5830] team0: Port device team_slave_1 added [ 74.560583][ T5835] hsr_slave_0: entered promiscuous mode [ 74.566938][ T5835] hsr_slave_1: entered promiscuous mode [ 74.579096][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.586298][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.593845][ T5841] bridge_slave_0: entered allmulticast mode [ 74.601130][ T5841] bridge_slave_0: entered promiscuous mode [ 74.616169][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.623194][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.649464][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.662059][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.669490][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.695563][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.715838][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.726175][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.734111][ T5841] bridge_slave_1: entered allmulticast mode [ 74.741172][ T5841] bridge_slave_1: entered promiscuous mode [ 74.800090][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.807492][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.814839][ T5842] bridge_slave_0: entered allmulticast mode [ 74.822047][ T5842] bridge_slave_0: entered promiscuous mode [ 74.840278][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.852884][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.862465][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.869940][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.877108][ T5842] bridge_slave_1: entered allmulticast mode [ 74.884565][ T5842] bridge_slave_1: entered promiscuous mode [ 74.981369][ T5830] hsr_slave_0: entered promiscuous mode [ 74.987669][ T5830] hsr_slave_1: entered promiscuous mode [ 74.994198][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 75.000070][ T5830] Cannot create hsr debugfs directory [ 75.007854][ T5841] team0: Port device team_slave_0 added [ 75.016697][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.041888][ T5841] team0: Port device team_slave_1 added [ 75.057777][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.116924][ T5842] team0: Port device team_slave_0 added [ 75.162840][ T5842] team0: Port device team_slave_1 added [ 75.177462][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.184963][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.199476][ T5833] Bluetooth: hci1: command tx timeout [ 75.211162][ T5839] Bluetooth: hci0: command tx timeout [ 75.223315][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.258748][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.265768][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.292015][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.340705][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.347682][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.373974][ T5839] Bluetooth: hci3: command tx timeout [ 75.374262][ T5833] Bluetooth: hci2: command tx timeout [ 75.380133][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.421778][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.428906][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.455751][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.512286][ T5841] hsr_slave_0: entered promiscuous mode [ 75.520421][ T5841] hsr_slave_1: entered promiscuous mode [ 75.526916][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 75.533120][ T5841] Cannot create hsr debugfs directory [ 75.615450][ T5842] hsr_slave_0: entered promiscuous mode [ 75.622169][ T5842] hsr_slave_1: entered promiscuous mode [ 75.628603][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 75.634338][ T5842] Cannot create hsr debugfs directory [ 75.810989][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.841732][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.854177][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.892745][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.050428][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.068424][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.087019][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.097638][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.193900][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.215697][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.226593][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.244788][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.390314][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.402776][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.412706][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.423541][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.499679][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.552401][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.577396][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.605524][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.612817][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.636702][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.643915][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.659255][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.670420][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.690789][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.697954][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.726135][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.733307][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.786054][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.812370][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.833730][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.840882][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.865115][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.872534][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.939799][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.006746][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.014100][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.024906][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.032159][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.186626][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.290052][ T5833] Bluetooth: hci1: command tx timeout [ 77.290347][ T5839] Bluetooth: hci0: command tx timeout [ 77.374354][ T5830] veth0_vlan: entered promiscuous mode [ 77.411509][ T5830] veth1_vlan: entered promiscuous mode [ 77.441570][ T5839] Bluetooth: hci2: command tx timeout [ 77.442077][ T5833] Bluetooth: hci3: command tx timeout [ 77.477106][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.519104][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.555764][ T5830] veth0_macvtap: entered promiscuous mode [ 77.606468][ T5830] veth1_macvtap: entered promiscuous mode [ 77.625846][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.653020][ T5841] veth0_vlan: entered promiscuous mode [ 77.674084][ T5841] veth1_vlan: entered promiscuous mode [ 77.704451][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.717868][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.732660][ T5835] veth0_vlan: entered promiscuous mode [ 77.761077][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.775816][ T5835] veth1_vlan: entered promiscuous mode [ 77.785477][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.794562][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.818682][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.832635][ T5842] veth0_vlan: entered promiscuous mode [ 77.862625][ T5835] veth0_macvtap: entered promiscuous mode [ 77.886135][ T5835] veth1_macvtap: entered promiscuous mode [ 77.894090][ T5842] veth1_vlan: entered promiscuous mode [ 77.906181][ T5841] veth0_macvtap: entered promiscuous mode [ 77.917038][ T5841] veth1_macvtap: entered promiscuous mode [ 77.942510][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.976536][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.010596][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.023430][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039463][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.048496][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.092616][ T5842] veth0_macvtap: entered promiscuous mode [ 78.124858][ T5842] veth1_macvtap: entered promiscuous mode [ 78.142616][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.148653][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.156915][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.167433][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.204481][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.247912][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.257701][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.272246][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.293071][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.293595][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.301012][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.311858][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.357974][ T3558] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368502][ T3558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.378027][ T3558] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.409986][ T3558] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.431616][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.450371][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.459412][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.600588][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.621578][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.670409][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.689356][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.779909][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.787769][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.900625][ T5922] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 78.905798][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.918535][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.934590][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.954696][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.128622][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.251296][ T5931] syzkaller1: entered promiscuous mode [ 79.256956][ T5931] syzkaller1: entered allmulticast mode [ 79.329036][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 79.336783][ T5831] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 79.347658][ T5831] usb 4-1: config 0 has no interface number 0 [ 79.355581][ T5831] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 79.358822][ T5833] Bluetooth: hci1: command tx timeout [ 79.371474][ T5833] Bluetooth: hci0: command tx timeout [ 79.375763][ T5831] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 79.387118][ T5831] usb 4-1: config 0 interface 126 has no altsetting 0 [ 79.399380][ T5831] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 79.409544][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.419518][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.427591][ T5831] usb 4-1: Product: syz [ 79.439900][ T5831] usb 4-1: Manufacturer: syz [ 79.444554][ T5831] usb 4-1: SerialNumber: syz [ 79.455981][ T5831] usb 4-1: config 0 descriptor?? [ 79.463778][ T5923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.471927][ T5923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.518384][ T5833] Bluetooth: hci3: command tx timeout [ 79.518404][ T5839] Bluetooth: hci2: command tx timeout [ 79.578195][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 79.583559][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.593470][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 79.604021][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 79.615636][ T10] usb 1-1: config 0 has no interface number 0 [ 79.622441][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.635698][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 79.645181][ T10] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 79.654614][ T10] usb 1-1: Product: syz [ 79.662021][ T10] usb 1-1: config 0 descriptor?? [ 79.759053][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 79.766618][ T5897] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 79.775293][ T5897] usb 3-1: config 0 has no interface number 0 [ 79.783841][ T5897] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 79.793056][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.801480][ T5897] usb 3-1: Product: syz [ 79.805663][ T5897] usb 3-1: Manufacturer: syz [ 79.810567][ T5897] usb 3-1: SerialNumber: syz [ 79.817540][ T5897] usb 3-1: config 0 descriptor?? [ 79.818260][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.834925][ T5897] asix 3-1:0.188: probe with driver asix failed with error -22 [ 79.885351][ T5831] ir_usb 4-1:0.126: IR Dongle converter detected [ 79.978265][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 79.985336][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.996122][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.009532][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.018652][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.026655][ T5876] usb 2-1: Product: syz [ 80.030949][ T5876] usb 2-1: Manufacturer: syz [ 80.035567][ T5876] usb 2-1: SerialNumber: syz [ 80.100797][ T5831] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 80.260336][ T5876] usb 2-1: 0:2 : does not exist [ 80.273229][ T5876] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 80.276050][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input5 [ 80.309311][ T5883] usb 4-1: USB disconnect, device number 2 [ 80.349916][ T5883] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 80.371386][ T5883] ir_usb 4-1:0.126: device disconnected [ 80.428947][ T5876] usb 2-1: USB disconnect, device number 2 [ 80.495875][ T5919] usb 1-1: USB disconnect, device number 2 [ 80.495899][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 80.904290][ T5944] syzkaller1: entered promiscuous mode [ 80.915093][ T5944] syzkaller1: entered allmulticast mode [ 81.114991][ T5953] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.130219][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.200513][ T5955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15'. [ 81.299839][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.310977][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.318257][ T800] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.328034][ T5897] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 81.338619][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.348104][ T5897] usb 4-1: Product: syz [ 81.352504][ T5897] usb 4-1: Manufacturer: syz [ 81.357108][ T5897] usb 4-1: SerialNumber: syz [ 81.379494][ T5897] usb 4-1: config 0 descriptor?? [ 81.397549][ T5897] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 81.414344][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.427434][ T5897] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 81.438779][ T5833] Bluetooth: hci1: command tx timeout [ 81.438954][ T5839] Bluetooth: hci0: command tx timeout [ 81.454687][ T5897] usb 4-1: media controller created [ 81.462856][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.475644][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.480931][ T800] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.515259][ T800] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.550225][ T5897] DVB: Unable to find symbol tda10046_attach() [ 81.553778][ T800] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.556717][ T5897] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 81.574674][ T5897] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 81.588159][ T800] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.596358][ T800] usb 2-1: Product: syz [ 81.601347][ T5839] Bluetooth: hci3: command tx timeout [ 81.608741][ T5839] Bluetooth: hci2: command tx timeout [ 81.615830][ T800] usb 2-1: Manufacturer: syz [ 81.622722][ T800] usb 2-1: SerialNumber: syz [ 81.639132][ T800] usb 2-1: config 0 descriptor?? [ 81.664147][ T800] usb 2-1: selecting invalid altsetting 0 [ 81.895461][ T10] usb 2-1: USB disconnect, device number 3 [ 82.202199][ T5897] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 82.230753][ T5897] usb 4-1: USB disconnect, device number 3 [ 82.309173][ T800] usb 3-1: USB disconnect, device number 2 [ 82.778961][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.954037][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.971415][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.979407][ T800] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.983402][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.008251][ T5919] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.145655][ T800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.157258][ T800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 116, setting to 64 [ 83.168154][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 83.173359][ T800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.182693][ T800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.192549][ T5919] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 83.203922][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.213241][ T800] usb 1-1: config 0 descriptor?? [ 83.219397][ T5982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.229363][ T800] hub 1-1:0.0: USB hub found [ 83.235206][ T5919] usb 3-1: config 0 descriptor?? [ 83.248479][ T5919] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 83.379297][ T5897] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 83.430491][ T800] hub 1-1:0.0: 1 port detected [ 83.541554][ T5897] usb 4-1: config 0 has no interfaces? [ 83.554324][ T5897] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 83.568934][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.577130][ T5897] usb 4-1: Product: syz [ 83.582320][ T5897] usb 4-1: Manufacturer: syz [ 83.586926][ T5897] usb 4-1: SerialNumber: syz [ 83.594013][ T5897] usb 4-1: config 0 descriptor?? [ 83.632057][ T800] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 83.638723][ T800] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 83.652424][ T800] usbhid 1-1:0.0: can't add hid device: -71 [ 83.658575][ T800] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.689607][ T800] usb 1-1: USB disconnect, device number 3 [ 83.798466][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.808675][ T24] usb 4-1: USB disconnect, device number 4 [ 83.948230][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 83.955890][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.967260][ T5876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.976416][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.988669][ T5876] usb 2-1: config 0 descriptor?? [ 84.206127][ T5876] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 84.254124][ T5919] gspca_vc032x: reg_w err -71 [ 84.259104][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.265475][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.271558][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.277060][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.282545][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.287908][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.293530][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.299014][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.304497][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.309867][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.315272][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.321087][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.326464][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.331851][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.337232][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.343072][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.348700][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.354016][ T5919] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.359535][ T5919] gspca_vc032x: Unknown sensor... [ 84.365892][ T5919] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 84.376338][ T5919] usb 3-1: USB disconnect, device number 3 [ 84.406500][ T24] usb 2-1: USB disconnect, device number 4 [ 84.438536][ T5897] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.618641][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 84.631681][ T5897] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 84.660934][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.674472][ T5897] usb 1-1: config 0 descriptor?? [ 84.684859][ T5897] gspca_main: sunplus-2.14.0 probing 041e:400b [ 85.030326][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.288207][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.288359][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.448246][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 85.450232][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.456053][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.464787][ T5915] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.472932][ T24] usb 3-1: config 0 has no interface number 0 [ 85.482629][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.488501][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 85.500357][ T5915] usb 2-1: config 0 descriptor?? [ 85.516306][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.526844][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.534931][ T24] usb 3-1: Product: syz [ 85.540381][ T24] usb 3-1: Manufacturer: syz [ 85.544993][ T24] usb 3-1: SerialNumber: syz [ 85.552559][ T24] usb 3-1: config 0 descriptor?? [ 85.561131][ T24] smsc75xx v1.0.0 [ 85.704435][ T5897] gspca_sunplus: reg_w_riv err -71 [ 85.721146][ T5897] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 85.739449][ T5897] usb 1-1: USB disconnect, device number 4 [ 85.938455][ T5915] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 85.952195][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input6 [ 86.053614][ T5915] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 86.146567][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 86.158507][ C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 86.166037][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 86.166940][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 86.186611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 86.196668][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 86.201873][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 86.221473][ C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00010002 [ 86.227537][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 86.235594][ C0] RDX: ffffc900021e1000 RSI: 00000000000006a9 RDI: 00000000000006aa [ 86.243558][ C0] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 86.251613][ C0] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 86.259577][ C0] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 86.267541][ C0] FS: 0000000000000000(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 86.276459][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.283206][ C0] CR2: 00002000000012b8 CR3: 0000000029850000 CR4: 00000000003526f0 [ 86.291180][ C0] Call Trace: [ 86.294448][ C0] [ 86.297366][ C0] ? __asan_memcpy+0x40/0x70 [ 86.301958][ C0] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 86.308195][ C0] queue_work_on+0x106/0x1d0 [ 86.312782][ C0] puts_queue+0xa3/0xe0 [ 86.316929][ C0] ? __pfx_puts_queue+0x10/0x10 [ 86.321768][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 86.326876][ C0] ? rcu_is_watching+0x15/0xb0 [ 86.331638][ C0] k_fn+0x7c/0xd0 [ 86.335261][ C0] k_pad+0x79a/0xa90 [ 86.339142][ C0] ? lock_acquire+0x106/0x330 [ 86.343819][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 86.349810][ C0] ? __pfx_k_pad+0x10/0x10 [ 86.354242][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 86.360060][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 86.365884][ C0] kbd_event+0x2ec1/0x40d0 [ 86.370293][ C0] ? kernel_fpu_end+0x4f/0x80 [ 86.374972][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 86.380164][ C0] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 86.385980][ C0] ? __pfx_kbd_event+0x10/0x10 [ 86.390734][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 86.395664][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 86.400591][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 86.405946][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 86.410869][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 86.415787][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.420799][ C0] ? input_pass_values+0x8d/0x890 [ 86.425801][ C0] ? lock_acquire+0x106/0x330 [ 86.430456][ C0] ? input_pass_values+0x8d/0x890 [ 86.435458][ C0] input_handle_events_default+0xd4/0x1a0 [ 86.441187][ C0] ? input_pass_values+0x8d/0x890 [ 86.446194][ C0] input_pass_values+0x288/0x890 [ 86.451202][ C0] ? input_handle_event+0xc35/0xf30 [ 86.456390][ C0] input_event_dispose+0x3e5/0x6b0 [ 86.461508][ C0] input_event+0x89/0xe0 [ 86.465736][ C0] hidinput_hid_event+0x1487/0x1e60 [ 86.470927][ C0] ? __pfx_hidinput_hid_event+0x10/0x10 [ 86.476486][ C0] ? hidinput_hid_event+0x14b6/0x1e60 [ 86.481841][ C0] hid_process_event+0x4be/0x620 [ 86.486769][ C0] hid_input_array_field+0x41c/0x5f0 [ 86.492040][ C0] hid_report_raw_event+0xdd7/0x1720 [ 86.497311][ C0] hid_input_report+0x44b/0x580 [ 86.502144][ C0] hid_irq_in+0x47e/0x6d0 [ 86.506455][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 86.511848][ C0] dummy_timer+0xbbd/0x45d0 [ 86.516341][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.521346][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.527165][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.532315][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.537231][ C0] __hrtimer_run_queues+0x529/0xc30 [ 86.542415][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 86.548126][ C0] ? read_tsc+0x9/0x20 [ 86.552198][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 86.557304][ C0] handle_softirqs+0x22a/0x7c0 [ 86.562053][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 86.566800][ C0] __irq_exit_rcu+0x5f/0x150 [ 86.571381][ C0] irq_exit_rcu+0x9/0x30 [ 86.575610][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 86.581229][ C0] [ 86.584243][ C0] [ 86.587176][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.593150][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 86.598771][ C0] Code: 81 81 02 e9 c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 be 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 86.618356][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 86.624404][ C0] RAX: 00000000000edd2d RBX: ffffffff819a49dd RCX: 0000000080000001 [ 86.632369][ C0] RDX: 0000000000000001 RSI: ffffffff8dff8547 RDI: ffffffff8c294900 [ 86.640345][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b843375b R09: 1ffff110170866eb [ 86.648301][ C0] R10: dffffc0000000000 R11: ffffed10170866ec R12: ffffffff903219b0 [ 86.656251][ C0] R13: 1ffffffff1cd29d8 R14: 0000000000000000 R15: 0000000000000000 [ 86.664275][ C0] ? do_idle+0x1bd/0x500 [ 86.668526][ C0] default_idle+0x9/0x20 [ 86.672777][ C0] default_idle_call+0x72/0xb0 [ 86.677528][ C0] do_idle+0x1bd/0x500 [ 86.681579][ C0] ? __pfx_do_idle+0x10/0x10 [ 86.686146][ C0] ? do_idle+0xc/0x500 [ 86.690196][ C0] cpu_startup_entry+0x43/0x60 [ 86.695144][ C0] rest_init+0x2de/0x300 [ 86.699398][ C0] start_kernel+0x385/0x3d0 [ 86.703979][ C0] x86_64_start_reservations+0x24/0x30 [ 86.709435][ C0] x86_64_start_kernel+0x143/0x1c0 [ 86.714552][ C0] common_startup_64+0x13e/0x147 [ 86.719483][ C0] [ 86.722485][ C0] Modules linked in: [ 86.726374][ C0] ---[ end trace 0000000000000000 ]--- [ 86.731807][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 86.737035][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 86.756881][ C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00010002 [ 86.762933][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 86.770887][ C0] RDX: ffffc900021e1000 RSI: 00000000000006a9 RDI: 00000000000006aa [ 86.778851][ C0] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 86.786807][ C0] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 86.794762][ C0] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 86.802724][ C0] FS: 0000000000000000(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 86.811662][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.818374][ C0] CR2: 00002000000012b8 CR3: 0000000029850000 CR4: 00000000003526f0 [ 86.826349][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 87.910685][ C0] Shutting down cpus with NMI [ 87.915848][ C0] Kernel Offset: disabled [ 87.920157][ C0] Rebooting in 86400 seconds..