last executing test programs: 21.949227648s ago: executing program 0 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r4, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) close(r5) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) 21.948793293s ago: executing program 2 (id=108): r0 = socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.572246327s ago: executing program 2 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004) 20.916044745s ago: executing program 0 (id=111): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 20.813568352s ago: executing program 0 (id=113): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 19.873011918s ago: executing program 2 (id=114): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r4, r3}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 19.866291483s ago: executing program 0 (id=115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) syz_clone(0xa1024100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000007c0)={0x0, 0x2, 0x2, 0x1000000000000005}) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x1, 0x1000a, 0x10003}) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0xbb29, 0x4, 0x7f, 0x81}}, 0x20) fcntl$lock(r0, 0x25, &(0x7f00000007c0)={0x0, 0x2, 0x2, 0x1000000000000005}) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x1, 0x1000a, 0x10003}) 19.405613054s ago: executing program 0 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f00000004c0)=""/185, 0xb9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) 15.790692045s ago: executing program 2 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) open_tree(0xffffffffffffff9c, 0x0, 0x88901) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 15.683854587s ago: executing program 0 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x666) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000650500a4dc42f0d3db19ef86e20002"], 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(0x0, 0x46042, 0x288) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) r3 = msgget$private(0x0, 0xc01) lstat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="74740f7a655041", 0x7) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0x9, 0x4, 0x6, 0x2, 0x6, 0xfffd, 0x4, 0x5}) r4 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r4, 0x1) tkill(r4, 0x7) rt_sigtimedwait(&(0x7f0000000240)={[0x97]}, 0x0, &(0x7f0000000300), 0x8) 14.601991926s ago: executing program 1 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x3}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0xc, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x4, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0xb}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0x9b}, {0x9, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x9, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0xf7}, {0x6, 0x0, 0x5, '\x00', 0x93}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0xd, 0x5, 0x1, '\x00', 0x7f}]}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x40000009, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$iommufd(0xffffffffffffff9c, 0x0, 0x357300, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 13.794539386s ago: executing program 2 (id=132): setregid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {0x0, 0x7f}, {}, @raw32}, {0x0, 0x2, 0x4, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) setregid(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x25dfdbfc, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x38}}, 0x90) 12.781133565s ago: executing program 2 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x666) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000650500a4dc42f0d3db19ef86e20002"], 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(0x0, 0x46042, 0x288) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) r3 = msgget$private(0x0, 0xc01) lstat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="74740f7a655041", 0x7) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0x9, 0x4, 0x6, 0x2, 0x6, 0xfffd, 0x4, 0x5}) r4 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r4, 0x7) rt_sigtimedwait(&(0x7f0000000240)={[0x97]}, 0x0, &(0x7f0000000300), 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') 11.706230265s ago: executing program 3 (id=136): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r4, r3}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 11.090303638s ago: executing program 1 (id=137): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000004000000000000000181100003613a5159730f19472829577b1733885144f1117c63180a91304bae238ec17c548825bba189fa6b346ccb76e70fabf99cf8e824cf053d51e70cb87578a23f4b1af01486f1c4721b2ae7355e41e5a7c229fda9dc7a3cbe5c42e25c0e2b29314df4af3ec6c34881b1bb6da", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="0000000000000000000017000000000000000000", @ANYRES32=0x0], 0x48) 7.890121852s ago: executing program 1 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x4004) 7.154972675s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9da9, 0x0) inotify_init1(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x9d0) poll(&(0x7f00000001c0)=[{r3, 0x801c}], 0x1, 0xe) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x0, 0x6}) syz_open_pts(0xffffffffffffffff, 0x2401) 7.114665081s ago: executing program 3 (id=143): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, 0x0, 0x4c2102c1) 7.02196832s ago: executing program 4 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x166b1ab5eb710134) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000640)=0x28b) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d56", 0x14) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002001, 0x0) 6.067287689s ago: executing program 1 (id=145): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r0, 0x13, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0}, 0x40) 6.067053503s ago: executing program 3 (id=146): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44841}, 0x4815) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xab4}}, 0x0) 5.956332674s ago: executing program 3 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x3}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0xc, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x4, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0xb}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0x9b}, {0x9, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x9, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0xf7}, {0x6, 0x0, 0x5, '\x00', 0x93}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0xd, 0x5, 0x1, '\x00', 0x7f}]}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x40000009, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$iommufd(0xffffffffffffff9c, 0x0, 0x357300, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 5.779610943s ago: executing program 4 (id=148): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce76", 0x2}], 0x1}}], 0x2, 0x40488e4) 5.639083568s ago: executing program 1 (id=149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e1406020000", 0x1e}], 0x1}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) timerfd_create(0x1, 0x0) 5.130271497s ago: executing program 4 (id=150): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) 4.427664089s ago: executing program 3 (id=151): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000004000000000000000181100003613a5159730f19472829577b1733885144f1117c63180a91304bae238ec17c548825bba189fa6b346ccb76e70fabf99cf8e824cf053d51e70cb87578a23f4b1af01486f1c4721b2ae7355e41e5a7c229fda9dc7a3cbe5c42e25c0e2b29314df4af3ec6c34881b1bb6da", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="0000000000000000000017000000000000000000", @ANYRES32=0x0], 0x48) 4.223188887s ago: executing program 4 (id=152): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730124000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000400)={0x5}) 1.099791767s ago: executing program 3 (id=153): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r4, r3}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 1.098944566s ago: executing program 4 (id=154): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 973.239479ms ago: executing program 4 (id=155): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 0s ago: executing program 32 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x666) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000650500a4dc42f0d3db19ef86e20002"], 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(0x0, 0x46042, 0x288) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) r3 = msgget$private(0x0, 0xc01) lstat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="74740f7a655041", 0x7) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0x9, 0x4, 0x6, 0x2, 0x6, 0xfffd, 0x4, 0x5}) r4 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r4, 0x1) tkill(r4, 0x7) rt_sigtimedwait(&(0x7f0000000240)={[0x97]}, 0x0, &(0x7f0000000300), 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 58.384210][ T5805] cgroup: Unknown subsys name 'net' [ 58.517783][ T5805] cgroup: Unknown subsys name 'cpuset' [ 58.525668][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.819489][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.567312][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.584464][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.592421][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.600628][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.617611][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.626238][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.634135][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.644253][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.651436][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.658822][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.666729][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.676368][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.684741][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.691801][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.699301][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.700853][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.708827][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.724149][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.726885][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.731723][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.763801][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.763940][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.771779][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.785197][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.785762][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.800007][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.807591][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.829246][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.844599][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.851914][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.214721][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 64.276678][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 64.343169][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 64.378098][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 64.463985][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 64.474148][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.481645][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.489114][ T5824] bridge_slave_0: entered allmulticast mode [ 64.497045][ T5824] bridge_slave_0: entered promiscuous mode [ 64.505676][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.512774][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.520062][ T5824] bridge_slave_1: entered allmulticast mode [ 64.527041][ T5824] bridge_slave_1: entered promiscuous mode [ 64.600363][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.639088][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.658382][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.665587][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.672708][ T5825] bridge_slave_0: entered allmulticast mode [ 64.679588][ T5825] bridge_slave_0: entered promiscuous mode [ 64.695742][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.702837][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.710597][ T5815] bridge_slave_0: entered allmulticast mode [ 64.717801][ T5815] bridge_slave_0: entered promiscuous mode [ 64.725488][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.732586][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.739899][ T5815] bridge_slave_1: entered allmulticast mode [ 64.747409][ T5815] bridge_slave_1: entered promiscuous mode [ 64.768048][ T5824] team0: Port device team_slave_0 added [ 64.774145][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.781376][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.788941][ T5825] bridge_slave_1: entered allmulticast mode [ 64.795922][ T5825] bridge_slave_1: entered promiscuous mode [ 64.830090][ T5824] team0: Port device team_slave_1 added [ 64.851777][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.858967][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.866932][ T5829] bridge_slave_0: entered allmulticast mode [ 64.873499][ T5829] bridge_slave_0: entered promiscuous mode [ 64.882435][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.916126][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.925476][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.932559][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.939973][ T5829] bridge_slave_1: entered allmulticast mode [ 64.947016][ T5829] bridge_slave_1: entered promiscuous mode [ 64.962611][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.988590][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.995857][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.022206][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.036086][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.055632][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.071169][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.078515][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.086154][ T5819] bridge_slave_0: entered allmulticast mode [ 65.092694][ T5819] bridge_slave_0: entered promiscuous mode [ 65.100015][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.107355][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.133919][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.159176][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.171661][ T5815] team0: Port device team_slave_0 added [ 65.180506][ T5815] team0: Port device team_slave_1 added [ 65.186539][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.193695][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.201032][ T5819] bridge_slave_1: entered allmulticast mode [ 65.208165][ T5819] bridge_slave_1: entered promiscuous mode [ 65.286762][ T5825] team0: Port device team_slave_0 added [ 65.301178][ T5829] team0: Port device team_slave_0 added [ 65.308932][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.316239][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.342491][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.355845][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.362910][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.388985][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.403222][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.416353][ T5824] hsr_slave_0: entered promiscuous mode [ 65.422609][ T5824] hsr_slave_1: entered promiscuous mode [ 65.431599][ T5825] team0: Port device team_slave_1 added [ 65.439245][ T5829] team0: Port device team_slave_1 added [ 65.458596][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.502154][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.509372][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.535937][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.557719][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.564906][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.591260][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.610829][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.617832][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.643835][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.664184][ T5819] team0: Port device team_slave_0 added [ 65.672368][ T5819] team0: Port device team_slave_1 added [ 65.679380][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.686470][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.712524][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.743751][ T5815] hsr_slave_0: entered promiscuous mode [ 65.750453][ T5815] hsr_slave_1: entered promiscuous mode [ 65.756867][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.765205][ T5815] Cannot create hsr debugfs directory [ 65.765869][ T54] Bluetooth: hci2: command tx timeout [ 65.770614][ T5822] Bluetooth: hci0: command tx timeout [ 65.804738][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.811717][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.838421][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.844985][ T5822] Bluetooth: hci1: command tx timeout [ 65.855324][ T54] Bluetooth: hci3: command tx timeout [ 65.887339][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.894480][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.920657][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.931753][ T5822] Bluetooth: hci4: command tx timeout [ 65.945700][ T5829] hsr_slave_0: entered promiscuous mode [ 65.951985][ T5829] hsr_slave_1: entered promiscuous mode [ 65.958316][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.966019][ T5829] Cannot create hsr debugfs directory [ 66.026015][ T5825] hsr_slave_0: entered promiscuous mode [ 66.032440][ T5825] hsr_slave_1: entered promiscuous mode [ 66.039098][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.046746][ T5825] Cannot create hsr debugfs directory [ 66.091542][ T5819] hsr_slave_0: entered promiscuous mode [ 66.097894][ T5819] hsr_slave_1: entered promiscuous mode [ 66.103937][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.112311][ T5819] Cannot create hsr debugfs directory [ 66.396283][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.409947][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.431070][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.451038][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.481384][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.513895][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.523746][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.550250][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.581559][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.598789][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.622133][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.631680][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.700471][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.712714][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.722355][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.752790][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.797371][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.823203][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.836301][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.847061][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.865230][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.920174][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.949492][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.978598][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.985931][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.998202][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.005349][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.029116][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.041261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.048411][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.071307][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.111704][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.122855][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.137040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.144151][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.210991][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.253191][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.260377][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.279898][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.316429][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.323568][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.337747][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.375052][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.409984][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.417169][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.430865][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.467256][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.474407][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.508521][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.532575][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.591015][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.598195][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.636935][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.649084][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.665852][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.672938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.685397][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.801368][ T5824] veth0_vlan: entered promiscuous mode [ 67.841850][ T5824] veth1_vlan: entered promiscuous mode [ 67.850825][ T5822] Bluetooth: hci2: command tx timeout [ 67.850855][ T54] Bluetooth: hci0: command tx timeout [ 67.919744][ T5824] veth0_macvtap: entered promiscuous mode [ 67.925952][ T54] Bluetooth: hci3: command tx timeout [ 67.936418][ T54] Bluetooth: hci1: command tx timeout [ 67.949958][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.004700][ T54] Bluetooth: hci4: command tx timeout [ 68.043809][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.072095][ T5829] veth0_vlan: entered promiscuous mode [ 68.101754][ T5824] veth1_macvtap: entered promiscuous mode [ 68.134244][ T5829] veth1_vlan: entered promiscuous mode [ 68.173338][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.199323][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.220125][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.229552][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.238419][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.247799][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.268777][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.295911][ T5829] veth0_macvtap: entered promiscuous mode [ 68.315984][ T5829] veth1_macvtap: entered promiscuous mode [ 68.351359][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.362654][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.376151][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.398141][ T5825] veth0_vlan: entered promiscuous mode [ 68.409785][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.424153][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.436184][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.476728][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.496575][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.505905][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.515704][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.532279][ T5815] veth0_vlan: entered promiscuous mode [ 68.542719][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.551433][ T5825] veth1_vlan: entered promiscuous mode [ 68.566042][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.580322][ T5815] veth1_vlan: entered promiscuous mode [ 68.587461][ T5819] veth0_vlan: entered promiscuous mode [ 68.626449][ T5819] veth1_vlan: entered promiscuous mode [ 68.639131][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.648440][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.690545][ T5825] veth0_macvtap: entered promiscuous mode [ 68.722245][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.743939][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.778095][ T5815] veth0_macvtap: entered promiscuous mode [ 68.778963][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.787162][ T5815] veth1_macvtap: entered promiscuous mode [ 68.815211][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.825934][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.835840][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.846387][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.857280][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.868991][ T5825] veth1_macvtap: entered promiscuous mode [ 68.888519][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.899089][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.909017][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.919553][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.929490][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.940058][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.951764][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.975627][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.983635][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.984278][ T5819] veth0_macvtap: entered promiscuous mode [ 69.005957][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.016835][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.026800][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.037324][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.048686][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.059025][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.071104][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.081297][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.092309][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.102649][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.113355][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.124247][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.163075][ T5819] veth1_macvtap: entered promiscuous mode [ 69.175525][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.184261][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.196929][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.206029][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.227371][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.236232][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.245173][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.253898][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.302334][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.313501][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.324131][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.339278][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.349217][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.401259][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.411180][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.421743][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.434978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.443741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.452643][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.479137][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.499583][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.510826][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.529533][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.558874][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.575434][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.591905][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.608969][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.643806][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.710731][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.728997][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.738611][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.784479][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.805160][ T5909] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 69.823654][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.849154][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.924898][ T54] Bluetooth: hci2: command tx timeout [ 69.929248][ T5822] Bluetooth: hci0: command tx timeout [ 70.004620][ T5822] Bluetooth: hci1: command tx timeout [ 70.004638][ T54] Bluetooth: hci3: command tx timeout [ 70.035986][ T5909] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.037459][ T5913] libceph: resolve '. [ 70.037459][ T5913] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 70.037459][ T5913] ' (ret=-3): failed [ 70.085429][ T54] Bluetooth: hci4: command tx timeout [ 70.211237][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.223446][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.234571][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.248783][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.390472][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.405891][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.477105][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.492682][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.561116][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.617640][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.675020][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.835986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.844238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.933863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.385340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.441816][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.605267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.607674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.656349][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.663135][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.670148][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 71.684584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.693683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.725696][ T5870] usb 3-1: config 0 has an invalid interface number: 163 but max is 0 [ 71.786683][ T5870] usb 3-1: config 0 has no interface number 0 [ 71.873951][ T5870] usb 3-1: config 0 interface 163 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 72.014529][ T54] Bluetooth: hci0: command tx timeout [ 72.019957][ T54] Bluetooth: hci2: command tx timeout [ 72.092413][ T5822] Bluetooth: hci1: command tx timeout [ 72.092618][ T5870] usb 3-1: config 0 interface 163 has no altsetting 0 [ 72.098310][ T5822] Bluetooth: hci3: command tx timeout [ 72.168304][ T54] Bluetooth: hci4: command tx timeout [ 72.309547][ T5870] usb 3-1: New USB device found, idVendor=0ccd, idProduct=004f, bcdDevice=cc.22 [ 72.318845][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.328191][ T5870] usb 3-1: Product: syz [ 72.332384][ T5870] usb 3-1: Manufacturer: syz [ 72.358325][ T5870] usb 3-1: SerialNumber: syz [ 72.376409][ T5870] usb 3-1: config 0 descriptor?? [ 72.384048][ T5927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.430005][ T5870] em28xx 3-1:0.163: New device syz syz @ 480 Mbps (0ccd:004f, interface 163, class 163) [ 72.441253][ T5870] em28xx 3-1:0.163: Video interface 163 found: bulk [ 72.474507][ T1203] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.725942][ T1203] usb 5-1: Using ep0 maxpacket: 8 [ 72.739358][ T1203] usb 5-1: config 9 has an invalid interface number: 29 but max is 0 [ 72.755832][ T1203] usb 5-1: config 9 has an invalid descriptor of length 36, skipping remainder of the config [ 72.799921][ T1203] usb 5-1: config 9 has no interface number 0 [ 72.821862][ T1203] usb 5-1: config 9 interface 29 has no altsetting 0 [ 72.840270][ T1203] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=54.9b [ 72.868369][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.886827][ T1203] usb 5-1: Product: syz [ 72.890158][ T5870] em28xx 3-1:0.163: unknown em28xx chip ID (0) [ 72.894825][ T1203] usb 5-1: Manufacturer: syz [ 72.922752][ T1203] usb 5-1: SerialNumber: syz [ 72.996997][ T5870] em28xx 3-1:0.163: reading from i2c device at 0xa0 failed (error=-5) [ 73.005685][ T5870] em28xx 3-1:0.163: board has no eeprom [ 73.064534][ T5870] em28xx 3-1:0.163: Identified as Terratec Cinergy A Hybrid XS (card=34) [ 73.085596][ T5870] em28xx 3-1:0.163: [ 73.085596][ T5870] [ 73.085596][ T5870] The support for this board weren't valid yet. [ 73.085596][ T5870] Please send a report of having this working [ 73.085596][ T5870] not to V4L mailing list (and/or to other addresses) [ 73.085596][ T5870] [ 73.122889][ T5870] em28xx 3-1:0.163: analog set to bulk mode. [ 73.169589][ T5867] em28xx 3-1:0.163: Registering V4L2 extension [ 73.175177][ T1203] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 73.226884][ T1203] dvb-usb: bulk message failed: -22 (2/0) [ 73.237082][ T5870] usb 3-1: USB disconnect, device number 2 [ 73.270320][ T5870] em28xx 3-1:0.163: Disconnecting em28xx [ 73.271617][ T1203] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 73.335515][ T1203] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 73.360904][ T1203] usb 5-1: media controller created [ 73.414142][ T5867] em28xx 3-1:0.163: Config register raw data: 0xffffffed [ 73.414221][ T1203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.434486][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.470155][ T5867] em28xx 3-1:0.163: AC97 chip type couldn't be determined [ 73.479672][ T5867] em28xx 3-1:0.163: No AC97 audio processor [ 73.494503][ T1203] cxusb: set interface failed [ 73.501198][ T5867] em28xx 3-1:0.163: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 73.513078][ T1203] dvb-usb: bulk message failed: -22 (1/0) [ 73.517579][ T5867] em28xx 3-1:0.163: Remote control support is not available for this card. [ 73.537214][ T5870] em28xx 3-1:0.163: Closing input extension [ 73.584985][ T5870] em28xx 3-1:0.163: Freeing device [ 73.613640][ T1203] DVB: Unable to find symbol lgdt330x_attach() [ 73.630342][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 73.630691][ T1203] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 73.642101][ T5858] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 73.691179][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.711706][ T5858] usb 2-1: Product: syz [ 74.015963][ T5858] usb 2-1: Manufacturer: syz [ 74.044501][ T1203] rc_core: IR keymap rc-dvico-portable not found [ 74.050942][ T1203] Registered IR keymap rc-empty [ 74.080552][ T1203] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 74.084414][ T5858] usb 2-1: SerialNumber: syz [ 74.098690][ T5858] usb 2-1: config 0 descriptor?? [ 74.188396][ T1203] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 74.239077][ T1203] dvb-usb: schedule remote query interval to 100 msecs. [ 74.262920][ T1203] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 74.297784][ T1203] usb 5-1: USB disconnect, device number 2 [ 74.433501][ T5858] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 74.485085][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.696237][ T1203] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 76.057988][ T5985] fuse: Bad value for 'fd' [ 76.091941][ T5858] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 76.118365][ T5858] usb 2-1: USB disconnect, device number 2 [ 76.774733][ T47] cfg80211: failed to load regulatory.db [ 76.955813][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.968419][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 76.983577][ T54] Bluetooth: hci1: hardware error 0x00 [ 77.735930][ T6010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.37'. [ 77.944677][ T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.224445][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 78.259609][ T47] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 78.278847][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.305983][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 78.339356][ T6012] sctp: failed to load transform for md5: -2 [ 78.368696][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.380054][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.441178][ T47] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 78.561156][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.569628][ T47] usb 2-1: Product: syz [ 78.573777][ T47] usb 2-1: Manufacturer: syz [ 78.578665][ T47] usb 2-1: SerialNumber: syz [ 78.590145][ T47] usb 2-1: config 0 descriptor?? [ 79.333848][ T6011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.344442][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.356404][ T47] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 79.574649][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.649043][ T6018] block device autoloading is deprecated and will be removed. [ 79.658234][ T6018] syz.4.39: attempt to access beyond end of device [ 79.658234][ T6018] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 80.387993][ T47] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 80.395041][ T47] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 80.510405][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.527431][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.544609][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.553836][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.780786][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.791333][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.803981][ T25] usb 3-1: Product: syz [ 80.810430][ T25] usb 3-1: Manufacturer: syz [ 80.919885][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 81.182612][ T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 81.375222][ T25] usb 3-1: USB disconnect, device number 3 [ 81.469709][ T47] usb 2-1: USB disconnect, device number 3 [ 81.600337][ T6057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.50'. [ 82.600959][ T6060] Zero length message leads to an empty skb [ 85.468996][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 85.478158][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 85.487891][ T54] Bluetooth: hci3: hardware error 0x00 [ 87.395891][ T6105] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.676102][ T6119] Bluetooth: MGMT ver 1.23 [ 89.794628][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.124588][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 90.142144][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.404705][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 90.635081][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.649440][ T5870] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 90.658832][ T5870] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 90.667025][ T5870] usb 5-1: Manufacturer: syz [ 90.673684][ T5870] usb 5-1: config 0 descriptor?? [ 90.891011][ T5870] usb 5-1: USB disconnect, device number 3 [ 91.037051][ T6146] input: syz1 as /devices/virtual/input/input6 [ 95.159062][ T6209] capability: warning: `syz.2.103' uses 32-bit capabilities (legacy support in use) [ 100.529493][ T6269] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 100.529493][ T6269] program syz.4.120 not setting count and/or reply_len properly [ 100.555827][ T6269] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 105.342270][ T6306] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 105.342270][ T6306] program syz.2.132 not setting count and/or reply_len properly [ 105.364974][ T6306] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 105.658682][ T6308] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.669944][ T6308] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.778359][ T6308] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.852145][ T6308] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 106.074895][ T6308] geneve2: entered promiscuous mode [ 106.080121][ T6308] geneve2: entered allmulticast mode [ 107.144507][ T5898] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.294450][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 107.341051][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.377060][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.421063][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.444059][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.481353][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.518970][ T5898] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.545043][ T5898] usb 5-1: Manufacturer: syz [ 107.636491][ T5898] usb 5-1: config 0 descriptor?? [ 107.853927][ T5898] usb 5-1: USB disconnect, device number 4 [ 113.386331][ T6361] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.395518][ T6361] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.404507][ T6361] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.414011][ T6361] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.427430][ T6361] geneve2: entered promiscuous mode [ 113.434098][ T6361] geneve2: entered allmulticast mode [ 119.218992][ T6365] syz.1.149 (6365): drop_caches: 2 [ 119.233439][ T6364] ------------[ cut here ]------------ [ 119.239030][ T6364] WARNING: CPU: 0 PID: 6364 at kernel/kcov.c:872 kcov_remote_start+0x542/0x7d0 [ 119.247978][ T6364] Modules linked in: [ 119.251969][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.1.149 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 119.262551][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.272618][ T6364] RIP: 0010:kcov_remote_start+0x542/0x7d0 [ 119.278356][ T6364] Code: 4c 89 ff be 03 00 00 00 e8 0b 58 22 03 e9 04 fb ff ff e8 e1 4d 28 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 b6 6a 28 0a 89 c0 48 c7 c7 e8 d4 02 00 48 03 3c c5 90 [ 119.297985][ T6364] RSP: 0018:ffffc90004b67250 EFLAGS: 00010002 [ 119.304136][ T6364] RAX: 0000000080000200 RBX: ffff88802aafbc00 RCX: 0000000000000002 [ 119.312097][ T6364] RDX: dffffc0000000000 RSI: ffffffff8c0aa880 RDI: ffffffff8c5e90a0 [ 119.320073][ T6364] RBP: 0000000000000000 R08: ffffffff942828ff R09: 1ffffffff285051f [ 119.328123][ T6364] R10: dffffc0000000000 R11: fffffbfff2850520 R12: ffffffff819f7b77 [ 119.336087][ T6364] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff8880b862d4e8 [ 119.344054][ T6364] FS: 00007f67fbeca6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 119.352974][ T6364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.359543][ T6364] CR2: 00007f9b14e8f108 CR3: 0000000041d96000 CR4: 00000000003526f0 [ 119.367508][ T6364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.375473][ T6364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.383434][ T6364] Call Trace: [ 119.386702][ T6364] [ 119.389622][ T6364] ? __warn+0x165/0x4d0 [ 119.393768][ T6364] ? kcov_remote_start+0x542/0x7d0 [ 119.398961][ T6364] ? report_bug+0x2b3/0x500 [ 119.403464][ T6364] ? kcov_remote_start+0x542/0x7d0 [ 119.408566][ T6364] ? handle_bug+0x60/0x90 [ 119.412908][ T6364] ? exc_invalid_op+0x1a/0x50 [ 119.417577][ T6364] ? asm_exc_invalid_op+0x1a/0x20 [ 119.422592][ T6364] ? kcov_remote_start+0x97/0x7d0 [ 119.427621][ T6364] ? kcov_remote_start+0x542/0x7d0 [ 119.432722][ T6364] ieee80211_rx_list+0x536/0x3810 [ 119.437747][ T6364] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 119.443199][ T6364] ? __pfx_lock_acquire+0x10/0x10 [ 119.448213][ T6364] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.454182][ T6364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.460502][ T6364] ? ieee80211_rx_napi+0xd6/0x3c0 [ 119.465515][ T6364] ieee80211_rx_napi+0x18a/0x3c0 [ 119.470440][ T6364] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.476765][ T6364] ? __local_bh_disable_ip+0x179/0x220 [ 119.482215][ T6364] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 119.487663][ T6364] ? skb_dequeue+0x113/0x150 [ 119.492256][ T6364] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 119.498232][ T6364] ? ieee80211_stop_device+0x2a/0xf0 [ 119.503507][ T6364] ieee80211_stop_device+0x3f/0xf0 [ 119.508607][ T6364] ieee80211_do_stop+0x1de0/0x23d0 [ 119.513713][ T6364] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 119.519176][ T6364] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 119.525055][ T6364] ? lockdep_hardirqs_on+0x99/0x150 [ 119.530254][ T6364] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.536570][ T6364] ? wiphy_work_cancel+0x1f0/0x3e0 [ 119.541668][ T6364] ieee80211_stop+0x436/0x4a0 [ 119.546332][ T6364] ? __pfx_ieee80211_stop+0x10/0x10 [ 119.551515][ T6364] __dev_close_many+0x219/0x300 [ 119.556358][ T6364] ? __pfx___dev_close_many+0x10/0x10 [ 119.561716][ T6364] ? __pfx___mutex_trylock_common+0x10/0x10 [ 119.567611][ T6364] dev_close_many+0x24e/0x4c0 [ 119.572276][ T6364] ? trace_contention_end+0x3c/0x120 [ 119.577558][ T6364] ? __mutex_lock+0x37f/0xee0 [ 119.582228][ T6364] ? __pfx_dev_close_many+0x10/0x10 [ 119.587420][ T6364] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.593385][ T6364] dev_close+0x1c0/0x2c0 [ 119.597616][ T6364] ? __pfx_dev_close+0x10/0x10 [ 119.602377][ T6364] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 119.608263][ T6364] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 119.614416][ T6364] cfg80211_rfkill_set_block+0x2d/0x50 [ 119.619863][ T6364] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 119.626014][ T6364] rfkill_set_block+0x1f1/0x440 [ 119.630853][ T6364] rfkill_fop_write+0x5b8/0x790 [ 119.635700][ T6364] ? __pfx_rfkill_fop_write+0x10/0x10 [ 119.641057][ T6364] ? bpf_lsm_file_permission+0x9/0x10 [ 119.646418][ T6364] ? security_file_permission+0x74/0x280 [ 119.652034][ T6364] ? rw_verify_area+0x1c3/0x6f0 [ 119.656880][ T6364] ? __pfx_rfkill_fop_write+0x10/0x10 [ 119.662239][ T6364] vfs_write+0x2a3/0xd30 [ 119.666475][ T6364] ? __pfx_vfs_write+0x10/0x10 [ 119.671224][ T6364] ? __fget_files+0x2a/0x410 [ 119.675802][ T6364] ? __fget_files+0x395/0x410 [ 119.680471][ T6364] ? __fget_files+0x2a/0x410 [ 119.685058][ T6364] ksys_write+0x18f/0x2b0 [ 119.689379][ T6364] ? __pfx_ksys_write+0x10/0x10 [ 119.694217][ T6364] ? do_syscall_64+0x100/0x230 [ 119.698974][ T6364] ? do_syscall_64+0xb6/0x230 [ 119.703639][ T6364] do_syscall_64+0xf3/0x230 [ 119.708132][ T6364] ? clear_bhb_loop+0x35/0x90 [ 119.712797][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.718699][ T6364] RIP: 0033:0x7f67fb180849 [ 119.723124][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.742814][ T6364] RSP: 002b:00007f67fbeca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.751225][ T6364] RAX: ffffffffffffffda RBX: 00007f67fb346080 RCX: 00007f67fb180849 [ 119.759185][ T6364] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000006 [ 119.767141][ T6364] RBP: 00007f67fb1f3986 R08: 0000000000000000 R09: 0000000000000000 [ 119.775269][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.783241][ T6364] R13: 0000000000000000 R14: 00007f67fb346080 R15: 00007fff487d5248 [ 119.791226][ T6364] [ 119.794251][ T6364] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.801551][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.1.149 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 119.812217][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.822277][ T6364] Call Trace: [ 119.825553][ T6364] [ 119.828472][ T6364] dump_stack_lvl+0x241/0x360 [ 119.833142][ T6364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.838334][ T6364] ? __pfx__printk+0x10/0x10 [ 119.843349][ T6364] ? vscnprintf+0x5d/0x90 [ 119.847669][ T6364] panic+0x349/0x880 [ 119.851584][ T6364] ? __warn+0x174/0x4d0 [ 119.855740][ T6364] ? __pfx_panic+0x10/0x10 [ 119.860149][ T6364] __warn+0x344/0x4d0 [ 119.864121][ T6364] ? kcov_remote_start+0x542/0x7d0 [ 119.869223][ T6364] report_bug+0x2b3/0x500 [ 119.873540][ T6364] ? kcov_remote_start+0x542/0x7d0 [ 119.878637][ T6364] handle_bug+0x60/0x90 [ 119.882790][ T6364] exc_invalid_op+0x1a/0x50 [ 119.887284][ T6364] asm_exc_invalid_op+0x1a/0x20 [ 119.892121][ T6364] RIP: 0010:kcov_remote_start+0x542/0x7d0 [ 119.897824][ T6364] Code: 4c 89 ff be 03 00 00 00 e8 0b 58 22 03 e9 04 fb ff ff e8 e1 4d 28 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 b6 6a 28 0a 89 c0 48 c7 c7 e8 d4 02 00 48 03 3c c5 90 [ 119.917417][ T6364] RSP: 0018:ffffc90004b67250 EFLAGS: 00010002 [ 119.923472][ T6364] RAX: 0000000080000200 RBX: ffff88802aafbc00 RCX: 0000000000000002 [ 119.931518][ T6364] RDX: dffffc0000000000 RSI: ffffffff8c0aa880 RDI: ffffffff8c5e90a0 [ 119.939487][ T6364] RBP: 0000000000000000 R08: ffffffff942828ff R09: 1ffffffff285051f [ 119.947445][ T6364] R10: dffffc0000000000 R11: fffffbfff2850520 R12: ffffffff819f7b77 [ 119.955399][ T6364] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff8880b862d4e8 [ 119.963364][ T6364] ? kcov_remote_start+0x97/0x7d0 [ 119.968386][ T6364] ieee80211_rx_list+0x536/0x3810 [ 119.973422][ T6364] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 119.978887][ T6364] ? __pfx_lock_acquire+0x10/0x10 [ 119.983920][ T6364] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.989898][ T6364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.996223][ T6364] ? ieee80211_rx_napi+0xd6/0x3c0 [ 120.001234][ T6364] ieee80211_rx_napi+0x18a/0x3c0 [ 120.006247][ T6364] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.012559][ T6364] ? __local_bh_disable_ip+0x179/0x220 [ 120.018008][ T6364] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 120.023449][ T6364] ? skb_dequeue+0x113/0x150 [ 120.028027][ T6364] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 120.033996][ T6364] ? ieee80211_stop_device+0x2a/0xf0 [ 120.039278][ T6364] ieee80211_stop_device+0x3f/0xf0 [ 120.044462][ T6364] ieee80211_do_stop+0x1de0/0x23d0 [ 120.049567][ T6364] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 120.055015][ T6364] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 120.060896][ T6364] ? lockdep_hardirqs_on+0x99/0x150 [ 120.066081][ T6364] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.072389][ T6364] ? wiphy_work_cancel+0x1f0/0x3e0 [ 120.077555][ T6364] ieee80211_stop+0x436/0x4a0 [ 120.082242][ T6364] ? __pfx_ieee80211_stop+0x10/0x10 [ 120.087441][ T6364] __dev_close_many+0x219/0x300 [ 120.092290][ T6364] ? __pfx___dev_close_many+0x10/0x10 [ 120.097652][ T6364] ? __pfx___mutex_trylock_common+0x10/0x10 [ 120.103546][ T6364] dev_close_many+0x24e/0x4c0 [ 120.108213][ T6364] ? trace_contention_end+0x3c/0x120 [ 120.113484][ T6364] ? __mutex_lock+0x37f/0xee0 [ 120.118148][ T6364] ? __pfx_dev_close_many+0x10/0x10 [ 120.123353][ T6364] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.129333][ T6364] dev_close+0x1c0/0x2c0 [ 120.133568][ T6364] ? __pfx_dev_close+0x10/0x10 [ 120.138319][ T6364] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 120.144200][ T6364] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 120.150344][ T6364] cfg80211_rfkill_set_block+0x2d/0x50 [ 120.155793][ T6364] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 120.161932][ T6364] rfkill_set_block+0x1f1/0x440 [ 120.166775][ T6364] rfkill_fop_write+0x5b8/0x790 [ 120.171630][ T6364] ? __pfx_rfkill_fop_write+0x10/0x10 [ 120.176998][ T6364] ? bpf_lsm_file_permission+0x9/0x10 [ 120.182440][ T6364] ? security_file_permission+0x74/0x280 [ 120.188065][ T6364] ? rw_verify_area+0x1c3/0x6f0 [ 120.192935][ T6364] ? __pfx_rfkill_fop_write+0x10/0x10 [ 120.198318][ T6364] vfs_write+0x2a3/0xd30 [ 120.202553][ T6364] ? __pfx_vfs_write+0x10/0x10 [ 120.207329][ T6364] ? __fget_files+0x2a/0x410 [ 120.211907][ T6364] ? __fget_files+0x395/0x410 [ 120.216576][ T6364] ? __fget_files+0x2a/0x410 [ 120.221154][ T6364] ksys_write+0x18f/0x2b0 [ 120.225493][ T6364] ? __pfx_ksys_write+0x10/0x10 [ 120.230332][ T6364] ? do_syscall_64+0x100/0x230 [ 120.235098][ T6364] ? do_syscall_64+0xb6/0x230 [ 120.239766][ T6364] do_syscall_64+0xf3/0x230 [ 120.244267][ T6364] ? clear_bhb_loop+0x35/0x90 [ 120.248940][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.254821][ T6364] RIP: 0033:0x7f67fb180849 [ 120.259228][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.278831][ T6364] RSP: 002b:00007f67fbeca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.287241][ T6364] RAX: ffffffffffffffda RBX: 00007f67fb346080 RCX: 00007f67fb180849 [ 120.295202][ T6364] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000006 [ 120.303174][ T6364] RBP: 00007f67fb1f3986 R08: 0000000000000000 R09: 0000000000000000 [ 120.311132][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.319093][ T6364] R13: 0000000000000000 R14: 00007f67fb346080 R15: 00007fff487d5248 [ 120.327062][ T6364] [ 120.330236][ T6364] Kernel Offset: disabled [ 120.334599][ T6364] Rebooting in 86400 seconds..