last executing test programs: 5.357839305s ago: executing program 4 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, 0x0, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r3, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) 5.227974505s ago: executing program 4 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.850467169s ago: executing program 4 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)={0x24, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) 4.829772857s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440580000000600054050640000050007000600000005000100060000000900020073797a3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.764519485s ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000ffff00000000008100000008000300", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8010) 4.631162797s ago: executing program 4 (id=11): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') unshare(0x24060400) sendmmsg$unix(r2, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "e37a1d08ad1a777f", "01e6eb8e29b66e2ca1421d3facf1cf9f2b8ac7da138c80874b6e97ef2aed3f2f", "821da034", "82cbe7288bbbe32e"}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r11 = dup(r4) syz_ublk_setup_queues(r11, r10, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(r11, 0xc0207506, &(0x7f0000000400)={r9}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.600840911s ago: executing program 0 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x28, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x28}}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.539480192s ago: executing program 3 (id=13): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listen(r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \aMaster Capture!Switch\' '], 0x33) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x104251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x408000}], 0x2, 0x40010002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="bf1600000000000073143186dae840500000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff7, &(0x7f0000000300)=""/4087, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.469987282s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)="3acea893ddb00f384c0504c5ae951f50c43e00318338c39d258d4d7d9d09348189a8dec4789c4fa224ac674e9b8a93d68b06f3020055ebedf8cff860a868199f505ab7a69d8947a61284839a5c90493bc509e593fe36031a41e7039c07d53508dfb26ad50dde7ef0af423fbb9f78b401e10fdf3356dc27ae73fd48b66f85a4ff9803352bc609b430e0a6ef9e9bcc7f50f35511fc9b60def059b31f971446a6298811d9e389386382f352", 0xaa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="0011d0fd818490ff9778091b6962c293b10ee7b7a71def75ebc956548460eca594ff6c7de46d747ebfb791cf85ae01b895d99737d55fc7fc1e3ab7ea57a3c1780eca1ef917eeadbe4012a6fdd650e05aaa0ac993846015e094f21882ea2e0b7e7fb6b2cdb4b21d4b8fc53b96945a", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f00000000c0)="d7e83da7d2012c3be116813f5db8e492c6c491b9558ff1690909d867e4292ee61f76625f26da74895e5650e2ae89e8f462ed5e4649a1b048553946df4721d6674cf35231bef8b69e7fdd5b4befaed9a876b22fb736c2880bd4a1b1e5511eb517e5dda6b8e07242e4da528f66b0cecf03866b28002bc13f2f4f9f1847987c4ff110512eb96afc123dbff33ddcfb07ea3f3dde72dede8126afc775cee672f779a984ce06dec92c2fe9322751b2235b2576913ee15c9dd9cf3d3348", 0xba}, {&(0x7f0000000680)="c29c391cc9ce2c4f039e96447542b05e86ce947f5829a65469d6c4af36c465051cd18a49a933bea1b9223092f77957e57c77ba4d6dd35ea5d45815b274c2085d09c3e295386c0409a5820be012cf1c36fbfb29bcb6d6a879761f08161cd019866f0bad798c42e0118a7fa5dd333a5ebffabb0ec74ec7cc942508c77371ea640d465b1eed84bf8a190d9201042466a803c10e636d5f76dcfba94429c96bcc15f30700c38f11372de1332833f51a7c9fdeaa599206ec526e7f00347b437d30e0", 0xbf}, {&(0x7f0000000780)="bfdb9e0248fbc4ddff8dd0b487ea3dcbf3c9a131e99274cfc4aacbddb1f847d44d66f7330ab40ac21e0f76363882b1fccb87a330af45239d89190fa9ef3e31ddfbceb0e02e89db92e92c4c38e311b72ee01e429ab70d136c2bb47501c074fbe8a04b9f577aface31e5327f5d6ea4b872b397408c8b1359e85d9200daeb4db9b8df8bced05d151a40ea0d12e0c6d91a4d78052563212080c67a799bf00ce95e6ca3a8c8b8", 0xa4}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000008c0)="1683b3e7616c29ec715a48234b43b1fde81f67fb6bf24058e1e124134817dc7c78f0c5b92f99a0f2112a6dc29fca72a13b6b88a0f0f4e207d29817e61183fa5e08cc6cbeab826939e630c4bcc1e421bb0e6f9039d4f4d32f0c99538654e81ab3da7c5258558b2fa5f4ed58b36dd5c21f222512b443f32a28105c719194ed8c9e91913cbd57d6c5823b3cfaa3788a08a4e62a17521160ce4d3f52345858fcfe474a57a309567a3989bdf90f303cb2835bc24a25bc3142f244ab2b9a429fb153757dff4fced3f42d532e8beebe7f24dd2adb1c33d53f71c089", 0xd8}, {&(0x7f00000009c0)="35d469f3fd27d12bb5b63713ef2bccb01ba56b9ebfabb14bb2b2515a26554cde91ab8d74474d741cbc059df047374214bde8123788d322170489a5b36e7a1c11dd81dfdbe835e9c06ac7b8351f2076683c30a3f3d9a9", 0x56}, {0x0}], 0x3, &(0x7f0000001cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}], 0x18}}], 0x5, 0x4040801) 4.366851903s ago: executing program 0 (id=14): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001540)=0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback, 0x10}}, 0x2, 0x0, 0x9690, 0x6, 0x2, 0x4, 0x8}, &(0x7f00000005c0)=0x9c) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x20002200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r14 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x7fffff00036dfb}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 4.186267048s ago: executing program 2 (id=15): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.93887454s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x5400, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) shutdown(r4, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r5, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='atkbd', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) 2.043278926s ago: executing program 0 (id=17): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_pidfd_open(r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f93000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000444000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24050095) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x5726, 0xc000, 0x3, 0xce}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) io_uring_enter(r2, 0x2219, 0xcf74, 0x52, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80004}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) 1.311355734s ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440580000000600054050640000050007000600000005000100060000000900020073797a3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.277649048s ago: executing program 1 (id=22): inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r1 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) write(r0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.031207249s ago: executing program 3 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)={0x8c, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x6a, 0x5b, "9675a79a3c0fd74b490ddbfd7c1d5f2049d6f822cbb2a8edf270b2211f68d8e64bf5c42f5bbe6cb7a2c580159b27c95313d63d1012c6fde6cce3e06abe3ff3ab84ea7a438bdb7cf34451f11ec55bb3c497c78f48e5c53e569134871be0c482d4b2d81cc58f02"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) 954.899374ms ago: executing program 4 (id=24): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)="3acea893ddb00f384c0504c5ae951f50c43e00318338c39d258d4d7d9d09348189a8dec4789c4fa224ac674e9b8a93d68b06f3020055ebedf8cff860a868199f505ab7a69d8947a61284839a5c90493bc509e593fe36031a41e7039c07d53508dfb26ad50dde7ef0af423fbb9f78b401e10fdf3356dc27ae73fd48b66f85a4ff9803352bc609b430e0a6ef9e9bcc7f50f35511fc9b60def059b31f971446a6298811d9e389386382f352", 0xaa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="0011d0fd818490ff9778091b6962c293b10ee7b7a71def75ebc956548460eca594ff6c7de46d747ebfb791cf85ae01b895d99737d55fc7fc1e3ab7ea57a3c1780eca1ef917eeadbe4012a6fdd650e05aaa0ac993846015e094f21882ea2e0b7e7fb6b2cdb4b21d4b8fc53b96945a", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f00000000c0)="d7e83da7d2012c3be116813f5db8e492c6c491b9558ff1690909d867e4292ee61f76625f26da74895e5650e2ae89e8f462ed5e4649a1b048553946df4721d6674cf35231bef8b69e7fdd5b4befaed9a876b22fb736c2880bd4a1b1e5511eb517e5dda6b8e07242e4da528f66b0cecf03866b28002bc13f2f4f9f1847987c4ff110512eb96afc123dbff33ddcfb07ea3f3dde72dede8126afc775cee672f779a984ce06dec92c2fe9322751b2235b2576913ee15c9dd9cf3d3348", 0xba}, {&(0x7f0000000680)="c29c391cc9ce2c4f039e96447542b05e86ce947f5829a65469d6c4af36c465051cd18a49a933bea1b9223092f77957e57c77ba4d6dd35ea5d45815b274c2085d09c3e295386c0409a5820be012cf1c36fbfb29bcb6d6a879761f08161cd019866f0bad798c42e0118a7fa5dd333a5ebffabb0ec74ec7cc942508c77371ea640d465b1eed84bf8a190d9201042466a803c10e636d5f76dcfba94429c96bcc15f30700c38f11372de1332833f51a7c9fdeaa599206ec526e7f00347b437d30e0", 0xbf}, {&(0x7f0000000780)="bfdb9e0248fbc4ddff8dd0b487ea3dcbf3c9a131e99274cfc4aacbddb1f847d44d66f7330ab40ac21e0f76363882b1fccb87a330af45239d89190fa9ef3e31ddfbceb0e02e89db92e92c4c38e311b72ee01e429ab70d136c2bb47501c074fbe8a04b9f577aface31e5327f5d6ea4b872b397408c8b1359e85d9200daeb4db9b8df8bced05d151a40ea0d12e0c6d91a4d78052563212080c67a799bf00ce95e6ca3a8c8b8", 0xa4}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000008c0)="1683b3e7616c29ec715a48234b43b1fde81f67fb6bf24058e1e124134817dc7c78f0c5b92f99a0f2112a6dc29fca72a13b6b88a0f0f4e207d29817e61183fa5e08cc6cbeab826939e630c4bcc1e421bb0e6f9039d4f4d32f0c99538654e81ab3da7c5258558b2fa5f4ed58b36dd5c21f222512b443f32a28105c719194ed8c9e91913cbd57d6c5823b3cfaa3788a08a4e62a17521160ce4d3f52345858fcfe474a57a309567a3989bdf90f303cb2835bc24a25bc3142f244ab2b9a429fb153757dff4fced3f42d532e8beebe7f24dd2adb1c33d53f71c089", 0xd8}, {&(0x7f00000009c0)="35d469f3fd27d12bb5b63713ef2bccb01ba56b9ebfabb14bb2b2515a26554cde91ab8d74474d741cbc059df047374214bde8123788d322170489a5b36e7a1c11dd81dfdbe835e9c06ac7b8351f2076683c30a3f3d9a9", 0x56}, {0x0}], 0x3, &(0x7f0000001cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}], 0x18}}], 0x5, 0x4040801) 807.842499ms ago: executing program 1 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x6}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x1, 0xdf, 0x40}}, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}]}, 0x68}}, 0x0) 731.889123ms ago: executing program 4 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010003d3dd71106d040e0af761010203010902120001e60200dc090439d30003000009"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004508001c006600e9090190a9fd6eddffffffffff12009078000000007c2c"], 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @empty, 0x80000b}, 0x1c) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x100, 0x4) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x2000007f, 0x4) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/34, 0x22) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 618.715647ms ago: executing program 0 (id=27): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) 608.114892ms ago: executing program 3 (id=28): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001200010025bd", @ANYBLOB='q\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_usb_ep_write(r0, 0x2, 0x1, &(0x7f0000000580)="05") r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) 532.975762ms ago: executing program 1 (id=29): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x3) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x900) 517.668976ms ago: executing program 2 (id=30): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440580000000600054050640000050007000600000005000100060000000900020073797a3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 408.819516ms ago: executing program 0 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)={0x8c, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x6a, 0x5b, "9675a79a3c0fd74b490ddbfd7c1d5f2049d6f822cbb2a8edf270b2211f68d8e64bf5c42f5bbe6cb7a2c580159b27c95313d63d1012c6fde6cce3e06abe3ff3ab84ea7a438bdb7cf34451f11ec55bb3c497c78f48e5c53e569134871be0c482d4b2d81cc58f02"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) 302.184875ms ago: executing program 2 (id=32): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440580000000600054050640000050007000600000005000100060000000900020073797a3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 301.752651ms ago: executing program 1 (id=33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x60, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x13, 0x20, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x3, '%'}, @exp_fastopen={0xfe, 0xa, 0xf989, "fcc6f99cb5dd"}, @exp_fastopen={0xfe, 0xa, 0xf989, "fecf41e06f02"}, @exp_fastopen={0xfe, 0x4}, @generic={0x13, 0x7, "221070264b"}, @mptcp=@synack={0x1e, 0x10, 0xf, 0x2, 0x6, 0xe, 0x7}]}}}}}}}, 0x0) 139.442217ms ago: executing program 1 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440580000000600054050640000050007000600000005000100060000000900020073797a3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 115.663354ms ago: executing program 2 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440580000000600054050640000050007000600000005000100060000000900020073797a310000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 0s ago: executing program 1 (id=36): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)="3acea893ddb00f384c0504c5ae951f50c43e00318338c39d258d4d7d9d09348189a8dec4789c4fa224ac674e9b8a93d68b06f3020055ebedf8cff860a868199f505ab7a69d8947a61284839a5c90493bc509e593fe36031a41e7039c07d53508dfb26ad50dde7ef0af423fbb9f78b401e10fdf3356dc27ae73fd48b66f85a4ff9803352bc609b430e0a6ef9e9bcc7f50f35511fc9b60def059b31f971446a6298811d9e389386382f352", 0xaa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="0011d0fd818490ff9778091b6962c293b10ee7b7a71def75ebc956548460eca594ff6c7de46d747ebfb791cf85ae01b895d99737d55fc7fc1e3ab7ea57a3c1780eca1ef917eeadbe4012a6fdd650e05aaa0ac993846015e094f21882ea2e0b7e7fb6b2cdb4b21d4b8fc53b96945a", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f00000000c0)="d7e83da7d2012c3be116813f5db8e492c6c491b9558ff1690909d867e4292ee61f76625f26da74895e5650e2ae89e8f462ed5e4649a1b048553946df4721d6674cf35231bef8b69e7fdd5b4befaed9a876b22fb736c2880bd4a1b1e5511eb517e5dda6b8e07242e4da528f66b0cecf03866b28002bc13f2f4f9f1847987c4ff110512eb96afc123dbff33ddcfb07ea3f3dde72dede8126afc775cee672f779a984ce06dec92c2fe9322751b2235b2576913ee15c9dd9cf3d3348", 0xba}, {&(0x7f0000000680)="c29c391cc9ce2c4f039e96447542b05e86ce947f5829a65469d6c4af36c465051cd18a49a933bea1b9223092f77957e57c77ba4d6dd35ea5d45815b274c2085d09c3e295386c0409a5820be012cf1c36fbfb29bcb6d6a879761f08161cd019866f0bad798c42e0118a7fa5dd333a5ebffabb0ec74ec7cc942508c77371ea640d465b1eed84bf8a190d9201042466a803c10e636d5f76dcfba94429c96bcc15f30700c38f11372de1332833f51a7c9fdeaa599206ec526e7f00347b437d30e0", 0xbf}, {&(0x7f0000000780)="bfdb9e0248fbc4ddff8dd0b487ea3dcbf3c9a131e99274cfc4aacbddb1f847d44d66f7330ab40ac21e0f76363882b1fccb87a330af45239d89190fa9ef3e31ddfbceb0e02e89db92e92c4c38e311b72ee01e429ab70d136c2bb47501c074fbe8a04b9f577aface31e5327f5d6ea4b872b397408c8b1359e85d9200daeb4db9b8df8bced05d151a40ea0d12e0c6d91a4d78052563212080c67a799bf00ce95e6ca3a8c8b8", 0xa4}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000008c0)="1683b3e7616c29ec715a48234b43b1fde81f67fb6bf24058e1e124134817dc7c78f0c5b92f99a0f2112a6dc29fca72a13b6b88a0f0f4e207d29817e61183fa5e08cc6cbeab826939e630c4bcc1e421bb0e6f9039d4f4d32f0c99538654e81ab3da7c5258558b2fa5f4ed58b36dd5c21f222512b443f32a28105c719194ed8c9e91913cbd57d6c5823b3cfaa3788a08a4e62a17521160ce4d3f52345858fcfe474a57a309567a3989bdf90f303cb2835bc24a25bc3142f244ab2b9a429fb153757dff4fced3f42d532e8beebe7f24dd2adb1c33d53f71c089", 0xd8}, {&(0x7f00000009c0)="35d469f3fd27d12bb5b63713ef2bccb01ba56b9ebfabb14bb2b2515a26554cde91ab8d74474d741cbc059df047374214bde8123788d322170489a5b36e7a1c11dd81dfdbe835e9c06ac7b8351f2076683c30a3f3d9a9", 0x56}, {0x0}], 0x3, &(0x7f0000001cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}], 0x18}}], 0x5, 0x4040801) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts. [ 75.746823][ T5603] cgroup: Unknown subsys name 'net' [ 75.836348][ T5603] cgroup: Unknown subsys name 'cpuset' [ 75.839703][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.430342][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.786474][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.808943][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.810117][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.810660][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.812883][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.824066][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.826253][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.830769][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.831781][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.835842][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.836601][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.837252][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.843722][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.846995][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.848490][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.908011][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.912161][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.913103][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.920914][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.921446][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.923881][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.928436][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.931797][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.950957][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.973831][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.182960][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.183153][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.183634][ T5630] bridge_slave_0: entered allmulticast mode [ 81.185446][ T5630] bridge_slave_0: entered promiscuous mode [ 81.197191][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.197461][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.200076][ T5633] bridge_slave_0: entered allmulticast mode [ 81.205430][ T5633] bridge_slave_0: entered promiscuous mode [ 81.264236][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.264339][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.264672][ T5630] bridge_slave_1: entered allmulticast mode [ 81.266152][ T5630] bridge_slave_1: entered promiscuous mode [ 81.271362][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.271651][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.272416][ T5633] bridge_slave_1: entered allmulticast mode [ 81.277827][ T5633] bridge_slave_1: entered promiscuous mode [ 81.320382][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.320608][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.320973][ T5635] bridge_slave_0: entered allmulticast mode [ 81.326432][ T5635] bridge_slave_0: entered promiscuous mode [ 81.338814][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.339093][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.340207][ T5635] bridge_slave_1: entered allmulticast mode [ 81.345287][ T5635] bridge_slave_1: entered promiscuous mode [ 81.436996][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.480029][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.480137][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.480276][ T5631] bridge_slave_0: entered allmulticast mode [ 81.482580][ T5631] bridge_slave_0: entered promiscuous mode [ 81.500494][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.501561][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.501846][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.504727][ T5634] bridge_slave_0: entered allmulticast mode [ 81.509890][ T5634] bridge_slave_0: entered promiscuous mode [ 81.534207][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.547400][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.565156][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.565379][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.565486][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.565826][ T5631] bridge_slave_1: entered allmulticast mode [ 81.575425][ T5631] bridge_slave_1: entered promiscuous mode [ 81.606985][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.607091][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.607207][ T5634] bridge_slave_1: entered allmulticast mode [ 81.608784][ T5634] bridge_slave_1: entered promiscuous mode [ 81.642986][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.719927][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.724786][ T5635] team0: Port device team_slave_0 added [ 81.746641][ T5630] team0: Port device team_slave_0 added [ 81.749645][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.773954][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.793509][ T5635] team0: Port device team_slave_1 added [ 81.810985][ T5630] team0: Port device team_slave_1 added [ 81.817068][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.824929][ T5633] team0: Port device team_slave_0 added [ 81.865155][ T5633] team0: Port device team_slave_1 added [ 81.882633][ T5631] team0: Port device team_slave_0 added [ 81.884089][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.884102][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.884124][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.887319][ T5631] team0: Port device team_slave_1 added [ 81.983088][ T5613] Bluetooth: hci1: command tx timeout [ 82.004151][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.004168][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.004192][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.006983][ T5634] team0: Port device team_slave_0 added [ 82.007756][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.007770][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.007814][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.010677][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.010698][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.010736][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.012846][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.012880][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.012953][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.056084][ T5634] team0: Port device team_slave_1 added [ 82.059032][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.059073][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.059146][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.063187][ T5613] Bluetooth: hci3: command tx timeout [ 82.063298][ T5613] Bluetooth: hci4: command tx timeout [ 82.063375][ T5613] Bluetooth: hci2: command tx timeout [ 82.063406][ T52] Bluetooth: hci0: command tx timeout [ 82.065435][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.065484][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.065581][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.070872][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.070885][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.070912][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.334556][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.334610][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.334684][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.418490][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.418509][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.418537][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.435810][ T5635] hsr_slave_0: entered promiscuous mode [ 82.438951][ T5635] hsr_slave_1: entered promiscuous mode [ 82.527266][ T5631] hsr_slave_0: entered promiscuous mode [ 82.528046][ T5631] hsr_slave_1: entered promiscuous mode [ 82.528628][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 82.528710][ T5631] Cannot create hsr debugfs directory [ 82.586055][ T5630] hsr_slave_0: entered promiscuous mode [ 82.586848][ T5630] hsr_slave_1: entered promiscuous mode [ 82.587410][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 82.587430][ T5630] Cannot create hsr debugfs directory [ 82.631746][ T5633] hsr_slave_0: entered promiscuous mode [ 82.634588][ T5633] hsr_slave_1: entered promiscuous mode [ 82.636448][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 82.636510][ T5633] Cannot create hsr debugfs directory [ 82.713887][ T5634] hsr_slave_0: entered promiscuous mode [ 82.714671][ T5634] hsr_slave_1: entered promiscuous mode [ 82.715262][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 82.715285][ T5634] Cannot create hsr debugfs directory [ 83.254920][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.273888][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.274993][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.278731][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.279670][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.289894][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.297302][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.326492][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.409757][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.420649][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.435377][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.440469][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.441826][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.465589][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.483701][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.487240][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.571817][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.585339][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.606355][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.610692][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.611563][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.625067][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.652562][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.657607][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.703938][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.748886][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.758157][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.777159][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.780403][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.781415][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.804547][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.805477][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.809961][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.880328][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.932820][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.932987][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.956158][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.969038][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.971285][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.971608][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.004892][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.009797][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.036704][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.040770][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.041787][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.061094][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.065187][ T5613] Bluetooth: hci1: command tx timeout [ 84.110401][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.142675][ T5624] Bluetooth: hci4: command tx timeout [ 84.142710][ T5624] Bluetooth: hci3: command tx timeout [ 84.142862][ T52] Bluetooth: hci0: command tx timeout [ 84.142934][ T5613] Bluetooth: hci2: command tx timeout [ 84.208739][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.240524][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.240604][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.275217][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.275319][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.319663][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.400506][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.432821][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.432934][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.459035][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.459108][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.481022][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.496108][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.563905][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.599418][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.614015][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.614124][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.615968][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.616057][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.650559][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.707130][ T5635] veth0_vlan: entered promiscuous mode [ 84.739335][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.767118][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.767193][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.777187][ T5635] veth1_vlan: entered promiscuous mode [ 84.800599][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.800691][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.865404][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.871647][ T5631] veth0_vlan: entered promiscuous mode [ 84.925844][ T5631] veth1_vlan: entered promiscuous mode [ 84.965835][ T5635] veth0_macvtap: entered promiscuous mode [ 84.984966][ T5635] veth1_macvtap: entered promiscuous mode [ 85.019359][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.044377][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.050707][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.084243][ T5631] veth0_macvtap: entered promiscuous mode [ 85.114672][ T5630] veth0_vlan: entered promiscuous mode [ 85.117726][ T3390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.129088][ T5631] veth1_macvtap: entered promiscuous mode [ 85.172159][ T1173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.173150][ T1173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.192653][ T5630] veth1_vlan: entered promiscuous mode [ 85.228082][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.261672][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.283375][ T1173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.318738][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.357946][ T5633] veth0_vlan: entered promiscuous mode [ 85.372802][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.372828][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.373885][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.381826][ T5633] veth1_vlan: entered promiscuous mode [ 85.427070][ T5630] veth0_macvtap: entered promiscuous mode [ 85.473813][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.473835][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.501670][ T5630] veth1_macvtap: entered promiscuous mode [ 85.560682][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.592527][ T5635] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.615045][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.637041][ T5633] veth0_macvtap: entered promiscuous mode [ 85.674513][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.675996][ T5634] veth0_vlan: entered promiscuous mode [ 85.736337][ T5633] veth1_macvtap: entered promiscuous mode [ 85.765469][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.765491][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.783877][ T3390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784021][ T3390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784139][ T3390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784240][ T3390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784323][ T3390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784417][ T3390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.866972][ T5634] veth1_vlan: entered promiscuous mode [ 85.955605][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.987955][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.019239][ T3390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.019259][ T3390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.065868][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.065889][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.145293][ T52] Bluetooth: hci1: command tx timeout [ 86.164703][ T5634] veth0_macvtap: entered promiscuous mode [ 86.222697][ T52] Bluetooth: hci0: command tx timeout [ 86.222732][ T52] Bluetooth: hci3: command tx timeout [ 86.222756][ T52] Bluetooth: hci4: command tx timeout [ 86.222912][ T5613] Bluetooth: hci2: command tx timeout [ 86.225104][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.225123][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.283906][ T5634] veth1_macvtap: entered promiscuous mode [ 86.339387][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.339438][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.358179][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.358234][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.482783][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.482835][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.519899][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.519922][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.559774][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.591369][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.624400][ T5723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10'. [ 86.763272][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763496][ T186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763540][ T186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763580][ T186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.018371][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.018393][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.153031][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.173645][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.173667][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.212475][ T5698] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.311129][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 87.314050][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 87.337504][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.362927][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 87.365613][ T5698] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 87.368824][ T5698] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.368869][ T5698] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.368897][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.368932][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.412239][ T25] usb 5-1: config 0 descriptor?? [ 87.449887][ T5698] usb 1-1: config 0 descriptor?? [ 87.500750][ T25] usb 5-1: probing VID:PID(0424:012C) [ 87.540322][ T25] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 87.540351][ T25] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 87.540370][ T25] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 87.540389][ T25] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 87.554105][ T25] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 87.762123][ T5706] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.884168][ T25] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 87.914273][ T5706] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 87.918377][ T5706] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 87.918409][ T5706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.918432][ T5706] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 87.918499][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.984375][ T5745] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.050299][ T5735] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.222848][ T4934] Bluetooth: hci1: command tx timeout [ 88.271494][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.314456][ T4934] Bluetooth: hci2: command tx timeout [ 88.314494][ T4934] Bluetooth: hci4: command tx timeout [ 88.314562][ T4934] Bluetooth: hci3: command tx timeout [ 88.314587][ T4934] Bluetooth: hci0: command tx timeout [ 88.353803][ T5698] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0B05:18C6.0001/input/input5 [ 88.521513][ T5698] asus 0003:0B05:18C6.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.0-1/input0 [ 88.580692][ T25] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 88.616761][ T5757] usb 1-1: USB disconnect, device number 2 [ 88.645054][ T5613] Bluetooth: hci5: Reading Intel version command failed (-71) [ 88.700636][ T5619] usb 2-1: USB disconnect, device number 2 [ 89.068223][ T5758] fido_id[5758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.176445][ T5775] syz_tun: entered allmulticast mode [ 90.277677][ T5677] usb 5-1: USB disconnect, device number 2 [ 90.284063][ T25] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 90.316360][ T5773] syz_tun: left allmulticast mode [ 90.378539][ T5677] USB vub300 remote SDIO host controller[0] now disconnected [ 90.923836][ T5677] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.054979][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.083813][ T5677] usb 5-1: Using ep0 maxpacket: 16 [ 91.091460][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.091514][ T5677] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 91.095076][ T5677] usb 5-1: config 230 has an invalid interface number: 57 but max is 0 [ 91.095139][ T5677] usb 5-1: config 230 has no interface number 0 [ 91.095222][ T5677] usb 5-1: config 230 interface 57 has no altsetting 0 [ 91.171609][ T5677] usb 5-1: string descriptor 0 read error: -22 [ 91.195983][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.215263][ T30] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 91.221014][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 91.221122][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.221147][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.221187][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.310581][ T5787] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.342295][ C0] [ 91.344685][ C0] ============================= [ 91.349994][ C0] WARNING: suspicious RCU usage [ 91.354957][ C0] syzkaller #0 Not tainted [ 91.359425][ C0] ----------------------------- [ 91.364374][ C0] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 91.374436][ C0] [ 91.374436][ C0] other info that might help us debug this: [ 91.374436][ C0] [ 91.384737][ C0] [ 91.384737][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 91.392891][ C0] locks held by syz.1.36/5802: 5, last CPU#0: [ 91.398989][ C0] #0: ffff88801b097180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 91.408166][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 91.417793][ C0] #2: ffff8880765ba258 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 91.428361][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 91.437868][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 91.448442][ C0] [ 91.448442][ C0] stack backtrace: [ 91.454434][ C0] CPU: 0 UID: 0 PID: 5802 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 91.463581][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.473691][ C0] Call Trace: [ 91.477020][ C0] [ 91.479896][ C0] dump_stack_lvl+0xe8/0x150 [ 91.484542][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 91.489953][ C0] __might_resched+0xbb/0x4c0 [ 91.494682][ C0] ? __cancel_work_sync+0x5c/0x110 [ 91.499859][ C0] __cancel_work_sync+0x6d/0x110 [ 91.504906][ C0] mmc_free_host+0x19/0x40 [ 91.509365][ C0] call_timer_fn+0x18d/0x5f0 [ 91.514005][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 91.520723][ C0] ? call_timer_fn+0xd5/0x5f0 [ 91.525452][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 91.530617][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.535863][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 91.542579][ C0] __run_timer_base+0x652/0x8b0 [ 91.547489][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 91.552920][ C0] ? ktime_get+0x1f5/0x220 [ 91.557386][ C0] ? lapic_next_event+0x11/0x20 [ 91.562284][ C0] run_timer_softirq+0xb7/0x170 [ 91.567183][ C0] handle_softirqs+0x226/0x860 [ 91.572001][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 91.576814][ C0] __irq_exit_rcu+0xcb/0x220 [ 91.581455][ C0] irq_exit_rcu+0x9/0x30 [ 91.585753][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 91.591441][ C0] [ 91.594398][ C0] [ 91.597370][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.603391][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 91.608717][ C0] Code: ff ff ff e8 70 bc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 33 da [ 91.628357][ C0] RSP: 0018:ffffc900055372d8 EFLAGS: 00000286 [ 91.634464][ C0] RAX: 2ab0061cc32be400 RBX: 0000000000000000 RCX: 8000000000000002 [ 91.642473][ C0] RDX: 000000006f28e7b8 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 91.650474][ C0] RBP: ffff888030adbe80 R08: ffffffff82441aca R09: 0000000000000000 [ 91.658475][ C0] R10: dffffc0000000000 R11: fffff940002e68f1 R12: ffffffff8ed5c960 [ 91.666480][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 91.674875][ C0] ? pfn_valid+0xba/0x490 [ 91.679316][ C0] ? pfn_valid+0xba/0x490 [ 91.683695][ C0] pfn_valid+0xd6/0x490 [ 91.687890][ C0] ? pfn_valid+0xba/0x490 [ 91.692270][ C0] page_table_check_clear+0x21/0x500 [ 91.697597][ C0] ? vm_normal_page+0x13c/0x2b0 [ 91.702496][ C0] __zap_vma_range+0x3a12/0x4f80 [ 91.707520][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 91.712860][ C0] ? mas_find+0x6d6/0xcb0 [ 91.717238][ C0] unmap_vmas+0x390/0x550 [ 91.721646][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 91.726541][ C0] ? mas_next_slot+0xc91/0xd70 [ 91.731381][ C0] exit_mmap+0x293/0x9f0 [ 91.735667][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 91.740493][ C0] ? __pfx_exit_aio+0x10/0x10 [ 91.745215][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 91.750463][ C0] __mmput+0x118/0x420 [ 91.754596][ C0] exit_mm+0x18e/0x240 [ 91.758707][ C0] do_exit+0x6cd/0x2360 [ 91.762910][ C0] ? __pfx_do_exit+0x10/0x10 [ 91.767539][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.772647][ C0] do_group_exit+0x22d/0x2f0 [ 91.777279][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.782529][ C0] get_signal+0x121b/0x12c0 [ 91.787113][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 91.792760][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 91.798988][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 91.804430][ C0] ? rcu_is_watching+0x16/0xb0 [ 91.809256][ C0] do_syscall_64+0x328/0x520 [ 91.813894][ C0] ? trace_irq_disable+0x3b/0x140 [ 91.818976][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.825084][ C0] ? clear_bhb_loop+0x70/0xc0 [ 91.829804][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.835739][ C0] RIP: 0033:0x7f2d87d9e159 [ 91.840201][ C0] Code: Unable to access opcode bytes at 0x7f2d87d9e12f. [ 91.847240][ C0] RSP: 002b:00007f2d88c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.855675][ C0] RAX: fffffffffffffe00 RBX: 00007f2d88025fa8 RCX: 00007f2d87d9e159 [ 91.863676][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d88025fa8 [ 91.871683][ C0] RBP: 00007f2d88025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.879680][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.887673][ C0] R13: 00007f2d88026038 R14: 00007f2d8814f960 R15: 00007f2d8814fa48 [ 91.895690][ C0] [ 91.898836][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 91.898852][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5802, name: syz.1.36 [ 91.898871][ C0] preempt_count: 102, expected: 0 [ 91.898882][ C0] RCU nest depth: 1, expected: 0 [ 91.898893][ C0] locks held by syz.1.36/5802: 5, last CPU#0: [ 91.898910][ C0] #0: ffff88801b097180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 91.898973][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 91.899037][ C0] #2: ffff8880765ba258 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 91.899110][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 91.899168][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 91.899233][ C0] Preemption disabled at: [ 91.899248][ C0] [<0000000000000000>] 0x0 [ 91.899275][ C0] CPU: 0 UID: 0 PID: 5802 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 91.899300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.899314][ C0] Call Trace: [ 91.899323][ C0] [ 91.899333][ C0] dump_stack_lvl+0xe8/0x150 [ 91.899369][ C0] __might_resched+0x36a/0x4c0 [ 91.899413][ C0] __cancel_work_sync+0x6d/0x110 [ 91.899453][ C0] mmc_free_host+0x19/0x40 [ 91.899482][ C0] call_timer_fn+0x18d/0x5f0 [ 91.899513][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 91.899538][ C0] ? call_timer_fn+0xd5/0x5f0 [ 91.899568][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 91.899608][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.899637][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 91.899664][ C0] __run_timer_base+0x652/0x8b0 [ 91.899707][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 91.899740][ C0] ? ktime_get+0x1f5/0x220 [ 91.899767][ C0] ? lapic_next_event+0x11/0x20 [ 91.899800][ C0] run_timer_softirq+0xb7/0x170 [ 91.899830][ C0] handle_softirqs+0x226/0x860 [ 91.899866][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 91.899907][ C0] __irq_exit_rcu+0xcb/0x220 [ 91.899939][ C0] irq_exit_rcu+0x9/0x30 [ 91.899969][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 91.900002][ C0] [ 91.900011][ C0] [ 91.900021][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.900047][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 91.900074][ C0] Code: ff ff ff e8 70 bc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 33 da [ 91.900093][ C0] RSP: 0018:ffffc900055372d8 EFLAGS: 00000286 [ 91.900113][ C0] RAX: 2ab0061cc32be400 RBX: 0000000000000000 RCX: 8000000000000002 [ 91.900128][ C0] RDX: 000000006f28e7b8 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 91.900146][ C0] RBP: ffff888030adbe80 R08: ffffffff82441aca R09: 0000000000000000 [ 91.900162][ C0] R10: dffffc0000000000 R11: fffff940002e68f1 R12: ffffffff8ed5c960 [ 91.900181][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 91.900203][ C0] ? pfn_valid+0xba/0x490 [ 91.900247][ C0] ? pfn_valid+0xba/0x490 [ 91.900278][ C0] pfn_valid+0xd6/0x490 [ 91.900306][ C0] ? pfn_valid+0xba/0x490 [ 91.900337][ C0] page_table_check_clear+0x21/0x500 [ 91.900366][ C0] ? vm_normal_page+0x13c/0x2b0 [ 91.900397][ C0] __zap_vma_range+0x3a12/0x4f80 [ 91.900483][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 91.900525][ C0] ? mas_find+0x6d6/0xcb0 [ 91.900564][ C0] unmap_vmas+0x390/0x550 [ 91.900602][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 91.900627][ C0] ? mas_next_slot+0xc91/0xd70 [ 91.900686][ C0] exit_mmap+0x293/0x9f0 [ 91.900713][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 91.900762][ C0] ? __pfx_exit_aio+0x10/0x10 [ 91.900800][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 91.900841][ C0] __mmput+0x118/0x420 [ 91.900874][ C0] exit_mm+0x18e/0x240 [ 91.900901][ C0] do_exit+0x6cd/0x2360 [ 91.900934][ C0] ? __pfx_do_exit+0x10/0x10 [ 91.900962][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.901008][ C0] do_group_exit+0x22d/0x2f0 [ 91.901031][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.901066][ C0] get_signal+0x121b/0x12c0 [ 91.901120][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 91.901160][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 91.901216][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 91.901250][ C0] ? rcu_is_watching+0x16/0xb0 [ 91.901286][ C0] do_syscall_64+0x328/0x520 [ 91.901320][ C0] ? trace_irq_disable+0x3b/0x140 [ 91.901345][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.901369][ C0] ? clear_bhb_loop+0x70/0xc0 [ 91.901398][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.901422][ C0] RIP: 0033:0x7f2d87d9e159 [ 91.901443][ C0] Code: Unable to access opcode bytes at 0x7f2d87d9e12f. [ 91.901455][ C0] RSP: 002b:00007f2d88c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.901478][ C0] RAX: fffffffffffffe00 RBX: 00007f2d88025fa8 RCX: 00007f2d87d9e159 [ 91.901496][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d88025fa8 [ 91.901511][ C0] RBP: 00007f2d88025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.901526][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.901541][ C0] R13: 00007f2d88026038 R14: 00007f2d8814f960 R15: 00007f2d8814fa48 [ 91.901577][ C0] [ 91.902158][ C0] [ 92.054314][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 92.192418][ T988] cfg80211: failed to load regulatory.db [ 92.443307][ C0] ============================= [ 92.448205][ C0] WARNING: suspicious RCU usage [ 92.453133][ C0] syzkaller #0 Tainted: G W [ 92.459143][ C0] ----------------------------- [ 92.464060][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 92.476142][ C0] [ 92.476142][ C0] other info that might help us debug this: [ 92.476142][ C0] [ 92.486458][ C0] [ 92.486458][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 92.494604][ C0] locks held by syz.1.36/5802: 5, last CPU#0: [ 92.500721][ C0] #0: ffff88801b097180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 92.509895][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 92.519507][ C0] #2: ffff8880765ba258 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 92.530090][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 92.539618][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 92.550201][ C0] [ 92.550201][ C0] stack backtrace: [ 92.556172][ C0] CPU: 0 UID: 0 PID: 5802 Comm: syz.1.36 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.566894][ C0] Tainted: [W]=WARN [ 92.570730][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.580820][ C0] Call Trace: [ 92.584130][ C0] [ 92.587009][ C0] dump_stack_lvl+0xe8/0x150 [ 92.591656][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 92.597092][ C0] __synchronize_srcu+0x157/0x2f0 [ 92.602167][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 92.607748][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.612840][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 92.618700][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 92.624288][ C0] ? synchronize_srcu+0x20a/0x260 [ 92.629353][ C0] wakeup_source_unregister+0x129/0x3f0 [ 92.634953][ C0] mmc_host_classdev_release+0x47/0x100 [ 92.640551][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 92.646751][ C0] device_release+0xc4/0x1f0 [ 92.651391][ C0] kobject_put+0x222/0x550 [ 92.655847][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 92.660663][ C0] call_timer_fn+0x18d/0x5f0 [ 92.665307][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 92.672022][ C0] ? call_timer_fn+0xd5/0x5f0 [ 92.676740][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 92.681897][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.687136][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 92.693867][ C0] __run_timer_base+0x652/0x8b0 [ 92.698780][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 92.704199][ C0] ? ktime_get+0x1f5/0x220 [ 92.708662][ C0] ? lapic_next_event+0x11/0x20 [ 92.713561][ C0] run_timer_softirq+0xb7/0x170 [ 92.718455][ C0] handle_softirqs+0x226/0x860 [ 92.723264][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 92.728085][ C0] __irq_exit_rcu+0xcb/0x220 [ 92.732722][ C0] irq_exit_rcu+0x9/0x30 [ 92.737012][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 92.742689][ C0] [ 92.745649][ C0] [ 92.748622][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.754651][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 92.759982][ C0] Code: ff ff ff e8 70 bc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 33 da [ 92.779631][ C0] RSP: 0018:ffffc900055372d8 EFLAGS: 00000286 [ 92.785756][ C0] RAX: 2ab0061cc32be400 RBX: 0000000000000000 RCX: 8000000000000002 [ 92.793768][ C0] RDX: 000000006f28e7b8 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 92.801808][ C0] RBP: ffff888030adbe80 R08: ffffffff82441aca R09: 0000000000000000 [ 92.809848][ C0] R10: dffffc0000000000 R11: fffff940002e68f1 R12: ffffffff8ed5c960 [ 92.817859][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 92.825877][ C0] ? pfn_valid+0xba/0x490 [ 92.830269][ C0] ? pfn_valid+0xba/0x490 [ 92.834647][ C0] pfn_valid+0xd6/0x490 [ 92.838859][ C0] ? pfn_valid+0xba/0x490 [ 92.843243][ C0] page_table_check_clear+0x21/0x500 [ 92.848616][ C0] ? vm_normal_page+0x13c/0x2b0 [ 92.853524][ C0] __zap_vma_range+0x3a12/0x4f80 [ 92.858561][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 92.863924][ C0] ? mas_find+0x6d6/0xcb0 [ 92.868300][ C0] unmap_vmas+0x390/0x550 [ 92.872694][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 92.877590][ C0] ? mas_next_slot+0xc91/0xd70 [ 92.882426][ C0] exit_mmap+0x293/0x9f0 [ 92.886711][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 92.891545][ C0] ? __pfx_exit_aio+0x10/0x10 [ 92.896286][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 92.901549][ C0] __mmput+0x118/0x420 [ 92.905674][ C0] exit_mm+0x18e/0x240 [ 92.909781][ C0] do_exit+0x6cd/0x2360 [ 92.913985][ C0] ? __pfx_do_exit+0x10/0x10 [ 92.918619][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.923710][ C0] do_group_exit+0x22d/0x2f0 [ 92.928336][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.933586][ C0] get_signal+0x121b/0x12c0 [ 92.938168][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 92.943777][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 92.950006][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 92.955433][ C0] ? rcu_is_watching+0x16/0xb0 [ 92.960255][ C0] do_syscall_64+0x328/0x520 [ 92.964888][ C0] ? trace_irq_disable+0x3b/0x140 [ 92.969961][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.976075][ C0] ? clear_bhb_loop+0x70/0xc0 [ 92.980801][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.986732][ C0] RIP: 0033:0x7f2d87d9e159 [ 92.991197][ C0] Code: Unable to access opcode bytes at 0x7f2d87d9e12f. [ 92.998289][ C0] RSP: 002b:00007f2d88c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.006757][ C0] RAX: fffffffffffffe00 RBX: 00007f2d88025fa8 RCX: 00007f2d87d9e159 [ 93.014771][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d88025fa8 [ 93.022789][ C0] RBP: 00007f2d88025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 93.030809][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.038828][ C0] R13: 00007f2d88026038 R14: 00007f2d8814f960 R15: 00007f2d8814fa48 [ 93.046957][ C0] [ 93.050068][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 93.050086][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5802, name: syz.1.36 [ 93.050105][ C0] preempt_count: 102, expected: 0 [ 93.050120][ C0] RCU nest depth: 1, expected: 0 [ 93.050132][ C0] locks held by syz.1.36/5802: 5, last CPU#0: [ 93.050149][ C0] #0: ffff88801b097180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 93.050214][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 93.050280][ C0] #2: ffff8880765ba258 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 93.050370][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 93.050438][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 93.050501][ C0] Preemption disabled at: [ 93.050508][ C0] [<0000000000000000>] 0x0 [ 93.050538][ C0] CPU: 0 UID: 0 PID: 5802 Comm: syz.1.36 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.050569][ C0] Tainted: [W]=WARN [ 93.050577][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.050591][ C0] Call Trace: [ 93.050600][ C0] [ 93.050608][ C0] dump_stack_lvl+0xe8/0x150 [ 93.050645][ C0] __might_resched+0x36a/0x4c0 [ 93.050702][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 93.050733][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 93.050758][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.050806][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.050837][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 93.050867][ C0] ? synchronize_srcu+0x20a/0x260 [ 93.050895][ C0] wakeup_source_unregister+0x129/0x3f0 [ 93.050929][ C0] mmc_host_classdev_release+0x47/0x100 [ 93.050961][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 93.050992][ C0] device_release+0xc4/0x1f0 [ 93.051029][ C0] kobject_put+0x222/0x550 [ 93.051053][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 93.051091][ C0] call_timer_fn+0x18d/0x5f0 [ 93.051123][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.051148][ C0] ? call_timer_fn+0xd5/0x5f0 [ 93.051178][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 93.051220][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.051249][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.051278][ C0] __run_timer_base+0x652/0x8b0 [ 93.051322][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 93.051355][ C0] ? ktime_get+0x1f5/0x220 [ 93.051381][ C0] ? lapic_next_event+0x11/0x20 [ 93.051415][ C0] run_timer_softirq+0xb7/0x170 [ 93.051444][ C0] handle_softirqs+0x226/0x860 [ 93.051479][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 93.051519][ C0] __irq_exit_rcu+0xcb/0x220 [ 93.051552][ C0] irq_exit_rcu+0x9/0x30 [ 93.051582][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 93.051616][ C0] [ 93.051625][ C0] [ 93.051646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.051680][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 93.051706][ C0] Code: ff ff ff e8 70 bc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 33 da [ 93.051726][ C0] RSP: 0018:ffffc900055372d8 EFLAGS: 00000286 [ 93.051745][ C0] RAX: 2ab0061cc32be400 RBX: 0000000000000000 RCX: 8000000000000002 [ 93.051762][ C0] RDX: 000000006f28e7b8 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 93.051779][ C0] RBP: ffff888030adbe80 R08: ffffffff82441aca R09: 0000000000000000 [ 93.051795][ C0] R10: dffffc0000000000 R11: fffff940002e68f1 R12: ffffffff8ed5c960 [ 93.051812][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 93.051833][ C0] ? pfn_valid+0xba/0x490 [ 93.051870][ C0] ? pfn_valid+0xba/0x490 [ 93.051899][ C0] pfn_valid+0xd6/0x490 [ 93.051925][ C0] ? pfn_valid+0xba/0x490 [ 93.051957][ C0] page_table_check_clear+0x21/0x500 [ 93.051984][ C0] ? vm_normal_page+0x13c/0x2b0 [ 93.052013][ C0] __zap_vma_range+0x3a12/0x4f80 [ 93.052090][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 93.052129][ C0] ? mas_find+0x6d6/0xcb0 [ 93.052164][ C0] unmap_vmas+0x390/0x550 [ 93.052198][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 93.052222][ C0] ? mas_next_slot+0xc91/0xd70 [ 93.052278][ C0] exit_mmap+0x293/0x9f0 [ 93.052303][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 93.052346][ C0] ? __pfx_exit_aio+0x10/0x10 [ 93.052378][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 93.052415][ C0] __mmput+0x118/0x420 [ 93.052446][ C0] exit_mm+0x18e/0x240 [ 93.052471][ C0] do_exit+0x6cd/0x2360 [ 93.052502][ C0] ? __pfx_do_exit+0x10/0x10 [ 93.052551][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.052592][ C0] do_group_exit+0x22d/0x2f0 [ 93.052613][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.052644][ C0] get_signal+0x121b/0x12c0 [ 93.052722][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 93.052762][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 93.052816][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 93.052843][ C0] ? rcu_is_watching+0x16/0xb0 [ 93.052877][ C0] do_syscall_64+0x328/0x520 [ 93.052910][ C0] ? trace_irq_disable+0x3b/0x140 [ 93.052935][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.052959][ C0] ? clear_bhb_loop+0x70/0xc0 [ 93.052986][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.053009][ C0] RIP: 0033:0x7f2d87d9e159 [ 93.053030][ C0] Code: Unable to access opcode bytes at 0x7f2d87d9e12f. [ 93.053042][ C0] RSP: 002b:00007f2d88c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.053066][ C0] RAX: fffffffffffffe00 RBX: 00007f2d88025fa8 RCX: 00007f2d87d9e159 [ 93.053083][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d88025fa8 [ 93.053099][ C0] RBP: 00007f2d88025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 93.053114][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.053129][ C0] R13: 00007f2d88026038 R14: 00007f2d8814f960 R15: 00007f2d8814fa48 [ 93.053165][ C0] [ 93.053220][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90005530000, but annotated. [ 93.053861][ C0] ------------[ cut here ]------------ [ 93.053871][ C0] 1 [ 93.053882][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.1.36/5802 [ 93.171809][ T5677] video4linux radio48: keene_cmd_set failed (-110) [ 93.172113][ T5677] radio-keene 5-1:230.57: V4L2 device registered as radio48 [ 93.676928][ C0] Modules linked in: [ 93.680866][ C0] CPU: 0 UID: 0 PID: 5802 Comm: syz.1.36 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.691591][ C0] Tainted: [W]=WARN [ 93.697247][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.708298][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 93.714264][ C0] Code: cc cc cc 41 ff c7 44 89 3d 49 00 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 93.733931][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 93.740033][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 2ab0061cc32be400 [ 93.748042][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 93.756054][ C0] RBP: ffff888030adbea0 R08: 0000000000000100 R09: 1ffff92000000ee4 [ 93.763890][ T52] Bluetooth: hci5: command 0xfc05 tx timeout [ 93.764344][ T52] Bluetooth: hci5: Resetting usb device. [ 93.765303][ T5613] Bluetooth: hci5: Reading Intel version command failed (-110) [ 93.783233][ C0] R10: dffffc0000000000 R11: fffff52000000ee5 R12: ffff8880232ef9b8 [ 93.791238][ C0] R13: ffff888053418fc0 R14: dffffc0000000000 R15: 0000000000000001 [ 93.799247][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 93.808220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.814838][ C0] CR2: 0000200000001c40 CR3: 000000006a66a000 CR4: 00000000003526f0 [ 93.822849][ C0] Call Trace: [ 93.826167][ C0] [ 93.829055][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 93.834655][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 93.839721][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 93.845302][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.850391][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.856259][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 93.861856][ C0] ? synchronize_srcu+0x20a/0x260 [ 93.866915][ C0] wakeup_source_unregister+0x129/0x3f0 [ 93.872513][ C0] mmc_host_classdev_release+0x47/0x100 [ 93.878099][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 93.884286][ C0] device_release+0xc4/0x1f0 [ 93.888934][ C0] kobject_put+0x222/0x550 [ 93.893390][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 93.898204][ C0] call_timer_fn+0x18d/0x5f0 [ 93.902840][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.909598][ C0] ? call_timer_fn+0xd5/0x5f0 [ 93.914321][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 93.919490][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.924738][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.931456][ C0] __run_timer_base+0x652/0x8b0 [ 93.936372][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 93.941794][ C0] ? ktime_get+0x1f5/0x220 [ 93.946248][ C0] ? lapic_next_event+0x11/0x20 [ 93.951147][ C0] run_timer_softirq+0xb7/0x170 [ 93.956043][ C0] handle_softirqs+0x226/0x860 [ 93.960865][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 93.965682][ C0] __irq_exit_rcu+0xcb/0x220 [ 93.970306][ C0] irq_exit_rcu+0x9/0x30 [ 93.974605][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 93.980282][ C0] [ 93.983245][ C0] [ 93.986209][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.992235][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 93.997576][ C0] Code: ff ff ff e8 70 bc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 33 da [ 94.017212][ C0] RSP: 0018:ffffc900055372d8 EFLAGS: 00000286 [ 94.023319][ C0] RAX: 2ab0061cc32be400 RBX: 0000000000000000 RCX: 8000000000000002 [ 94.031336][ C0] RDX: 000000006f28e7b8 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 94.039353][ C0] RBP: ffff888030adbe80 R08: ffffffff82441aca R09: 0000000000000000 [ 94.047371][ C0] R10: dffffc0000000000 R11: fffff940002e68f1 R12: ffffffff8ed5c960 [ 94.055380][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 94.063403][ C0] ? pfn_valid+0xba/0x490 [ 94.067791][ C0] ? pfn_valid+0xba/0x490 [ 94.072173][ C0] pfn_valid+0xd6/0x490 [ 94.076375][ C0] ? pfn_valid+0xba/0x490 [ 94.080764][ C0] page_table_check_clear+0x21/0x500 [ 94.086089][ C0] ? vm_normal_page+0x13c/0x2b0 [ 94.090996][ C0] __zap_vma_range+0x3a12/0x4f80 [ 94.096043][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 94.101389][ C0] ? mas_find+0x6d6/0xcb0 [ 94.105766][ C0] unmap_vmas+0x390/0x550 [ 94.110151][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 94.115051][ C0] ? mas_next_slot+0xc91/0xd70 [ 94.119889][ C0] exit_mmap+0x293/0x9f0 [ 94.124174][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 94.129010][ C0] ? __pfx_exit_aio+0x10/0x10 [ 94.133766][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 94.139009][ C0] __mmput+0x118/0x420 [ 94.143127][ C0] exit_mm+0x18e/0x240 [ 94.147282][ C0] do_exit+0x6cd/0x2360 [ 94.151495][ C0] ? __pfx_do_exit+0x10/0x10 [ 94.156213][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.161304][ C0] do_group_exit+0x22d/0x2f0 [ 94.165933][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.171184][ C0] get_signal+0x121b/0x12c0 [ 94.175760][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 94.181350][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 94.187565][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 94.192987][ C0] ? rcu_is_watching+0x16/0xb0 [ 94.197816][ C0] do_syscall_64+0x328/0x520 [ 94.202463][ C0] ? trace_irq_disable+0x3b/0x140 [ 94.207515][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.213609][ C0] ? clear_bhb_loop+0x70/0xc0 [ 94.218339][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.224284][ C0] RIP: 0033:0x7f2d87d9e159 [ 94.228743][ C0] Code: Unable to access opcode bytes at 0x7f2d87d9e12f. [ 94.235788][ C0] RSP: 002b:00007f2d88c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.244243][ C0] RAX: fffffffffffffe00 RBX: 00007f2d88025fa8 RCX: 00007f2d87d9e159 [ 94.252256][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d88025fa8 [ 94.260262][ C0] RBP: 00007f2d88025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 94.268268][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.276282][ C0] R13: 00007f2d88026038 R14: 00007f2d8814f960 R15: 00007f2d8814fa48 [ 94.284311][ C0] [ 94.287365][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.294692][ C0] CPU: 0 UID: 0 PID: 5802 Comm: syz.1.36 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.305436][ C0] Tainted: [W]=WARN [ 94.309267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.319355][ C0] Call Trace: [ 94.322670][ C0] [ 94.325545][ C0] vpanic+0x56d/0xa60 [ 94.329579][ C0] ? __pfx__printk+0x10/0x10 [ 94.334207][ C0] ? __pfx_vpanic+0x10/0x10 [ 94.338757][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 94.344097][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 94.349340][ C0] panic+0xc5/0xd0 [ 94.353121][ C0] ? __pfx_panic+0x10/0x10 [ 94.357601][ C0] __warn+0x315/0x4c0 [ 94.361628][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 94.366957][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 94.372303][ C0] __report_bug+0x276/0x570 [ 94.376885][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 94.382212][ C0] ? __pfx___report_bug+0x10/0x10 [ 94.387296][ C0] ? __wake_up_klogd+0xf0/0x130 [ 94.392208][ C0] ? vprintk_emit+0x4ee/0x560 [ 94.396936][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 94.402030][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 94.407381][ C0] report_bug+0x16b/0x220 [ 94.411752][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 94.417081][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 94.422413][ C0] handle_bug+0x9c/0x200 [ 94.426698][ C0] exc_invalid_op+0x1a/0x50 [ 94.431234][ C0] asm_exc_invalid_op+0x1a/0x20 [ 94.436124][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 94.442089][ C0] Code: cc cc cc 41 ff c7 44 89 3d 49 00 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 94.461738][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 94.467853][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 2ab0061cc32be400 [ 94.475871][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 94.483963][ C0] RBP: ffff888030adbea0 R08: 0000000000000100 R09: 1ffff92000000ee4 [ 94.491991][ C0] R10: dffffc0000000000 R11: fffff52000000ee5 R12: ffff8880232ef9b8 [ 94.500007][ C0] R13: ffff888053418fc0 R14: dffffc0000000000 R15: 0000000000000001 [ 94.508035][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 94.513380][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 94.518976][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 94.524067][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 94.529651][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.534742][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.540630][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 94.546218][ C0] ? synchronize_srcu+0x20a/0x260 [ 94.551295][ C0] wakeup_source_unregister+0x129/0x3f0 [ 94.556891][ C0] mmc_host_classdev_release+0x47/0x100 [ 94.562488][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 94.568678][ C0] device_release+0xc4/0x1f0 [ 94.573325][ C0] kobject_put+0x222/0x550 [ 94.577785][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 94.582598][ C0] call_timer_fn+0x18d/0x5f0 [ 94.587228][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 94.593942][ C0] ? call_timer_fn+0xd5/0x5f0 [ 94.598667][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 94.603831][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.609069][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 94.615782][ C0] __run_timer_base+0x652/0x8b0 [ 94.620697][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 94.626117][ C0] ? ktime_get+0x1f5/0x220 [ 94.630568][ C0] ? lapic_next_event+0x11/0x20 [ 94.635467][ C0] run_timer_softirq+0xb7/0x170 [ 94.640364][ C0] handle_softirqs+0x226/0x860 [ 94.645170][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 94.649980][ C0] __irq_exit_rcu+0xcb/0x220 [ 94.654607][ C0] irq_exit_rcu+0x9/0x30 [ 94.658888][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 94.664582][ C0] [ 94.667564][ C0] [ 94.670530][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.676553][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 94.681879][ C0] Code: ff ff ff e8 70 bc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 33 da [ 94.701547][ C0] RSP: 0018:ffffc900055372d8 EFLAGS: 00000286 [ 94.707666][ C0] RAX: 2ab0061cc32be400 RBX: 0000000000000000 RCX: 8000000000000002 [ 94.715676][ C0] RDX: 000000006f28e7b8 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 94.723689][ C0] RBP: ffff888030adbe80 R08: ffffffff82441aca R09: 0000000000000000 [ 94.731696][ C0] R10: dffffc0000000000 R11: fffff940002e68f1 R12: ffffffff8ed5c960 [ 94.739732][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 94.747739][ C0] ? pfn_valid+0xba/0x490 [ 94.752130][ C0] ? pfn_valid+0xba/0x490 [ 94.756497][ C0] pfn_valid+0xd6/0x490 [ 94.760697][ C0] ? pfn_valid+0xba/0x490 [ 94.765067][ C0] page_table_check_clear+0x21/0x500 [ 94.770395][ C0] ? vm_normal_page+0x13c/0x2b0 [ 94.775303][ C0] __zap_vma_range+0x3a12/0x4f80 [ 94.780313][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 94.785646][ C0] ? mas_find+0x6d6/0xcb0 [ 94.790027][ C0] unmap_vmas+0x390/0x550 [ 94.794397][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 94.799276][ C0] ? mas_next_slot+0xc91/0xd70 [ 94.804108][ C0] exit_mmap+0x293/0x9f0 [ 94.808396][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 94.813215][ C0] ? __pfx_exit_aio+0x10/0x10 [ 94.817948][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 94.823204][ C0] __mmput+0x118/0x420 [ 94.827320][ C0] exit_mm+0x18e/0x240 [ 94.831415][ C0] do_exit+0x6cd/0x2360 [ 94.835600][ C0] ? __pfx_do_exit+0x10/0x10 [ 94.840213][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.845275][ C0] do_group_exit+0x22d/0x2f0 [ 94.849886][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.855121][ C0] get_signal+0x121b/0x12c0 [ 94.859677][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 94.865284][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 94.871511][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 94.876930][ C0] ? rcu_is_watching+0x16/0xb0 [ 94.881738][ C0] do_syscall_64+0x328/0x520 [ 94.886378][ C0] ? trace_irq_disable+0x3b/0x140 [ 94.891438][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.897533][ C0] ? clear_bhb_loop+0x70/0xc0 [ 94.902247][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.908170][ C0] RIP: 0033:0x7f2d87d9e159 [ 94.912615][ C0] Code: Unable to access opcode bytes at 0x7f2d87d9e12f. [ 94.919657][ C0] RSP: 002b:00007f2d88c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.928112][ C0] RAX: fffffffffffffe00 RBX: 00007f2d88025fa8 RCX: 00007f2d87d9e159 [ 94.936115][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2d88025fa8 [ 94.944140][ C0] RBP: 00007f2d88025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 94.952136][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.960133][ C0] R13: 00007f2d88026038 R14: 00007f2d8814f960 R15: 00007f2d8814fa48 [ 94.968164][ C0] [ 94.971827][ C0] Kernel Offset: disabled [ 94.976172][ C0] Rebooting in 86400 seconds..