last executing test programs: 1m31.063166316s ago: executing program 2 (id=148): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) 1m25.656181802s ago: executing program 2 (id=152): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000a33000/0x4000)=nil, 0x4000) 1m18.705240641s ago: executing program 2 (id=160): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000a33000/0x4000)=nil, 0x4000) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m10.85138364s ago: executing program 2 (id=165): vmsplice(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xcf77) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, 0x0, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\x00', &(0x7f0000019300)='vcan0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) 1m7.805125656s ago: executing program 2 (id=169): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000a33000/0x4000)=nil, 0x4000) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) 1m5.931677605s ago: executing program 2 (id=170): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x2}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000440)={&(0x7f0000000380)=""/184, 0xb8, 0x5, 0xf}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r5, 0x2020}], 0x1, 0xb8) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000076000d0b27bd7000fdffffff030000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) 50.013115447s ago: executing program 32 (id=170): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x2}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000440)={&(0x7f0000000380)=""/184, 0xb8, 0x5, 0xf}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r5, 0x2020}], 0x1, 0xb8) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000076000d0b27bd7000fdffffff030000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) 8.700140993s ago: executing program 0 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0x9, 0xa}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7.563056198s ago: executing program 0 (id=229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x30}}, 0x4) 6.640091068s ago: executing program 0 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007060500000000000000000001000002050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 6.484620501s ago: executing program 0 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 6.208346297s ago: executing program 1 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r2, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) 6.207366077s ago: executing program 4 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 5.992163091s ago: executing program 1 (id=238): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000806010100000000000000000500000a0500018057"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) 5.772222576s ago: executing program 1 (id=240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)={0x0, 0xfffb, 0x20, 0x2b}, &(0x7f0000000380)=0x18) 5.57210798s ago: executing program 1 (id=241): landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_dev$sg(0x0, 0x0, 0x401) writev(r2, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d757b731540a"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="42fc1eb0e8e89526c52470cc9288"]}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x409}}]}) 5.478092833s ago: executing program 0 (id=242): socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x6, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xff7ffff3, 0x0, 0x0, 0x2000, '\x00', 0x4, 0x5, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x800000, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.63811927s ago: executing program 4 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007060500000000000000000001000002050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 4.417610256s ago: executing program 4 (id=246): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x84) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000019380)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r6, r5, 0x1, [0x0, 0xf7df]}, {r6, r7, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) 4.364065596s ago: executing program 0 (id=247): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021a0001000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000180)=0x85, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0xf04c0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x200402) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x802) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x2, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.669823203s ago: executing program 4 (id=249): symlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1.947834938s ago: executing program 3 (id=251): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a567c092221b80400010029bd70000000000002201400"], 0x24}}, 0xea5bc50b6199d7fe) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000001680)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_ublk_setup_io_uring(0xdce, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x0, 0xc}, &(0x7f0000000040), 0x0, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000000840)}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020}, 0x2020) 1.133363666s ago: executing program 3 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) 976.223459ms ago: executing program 1 (id=253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 654.561806ms ago: executing program 3 (id=254): mq_open(&(0x7f00000051c0)='/dev/video#\x00', 0x1, 0x1c0, 0x0) 511.129759ms ago: executing program 3 (id=255): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 379.991442ms ago: executing program 4 (id=256): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 314.640333ms ago: executing program 3 (id=257): r0 = socket$inet6(0xa, 0x803, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@private=0xa010100, 0x4, 0x33}, 0xa, @in6=@mcast1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) 141.536627ms ago: executing program 3 (id=258): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, 0x0) 174.98µs ago: executing program 4 (id=259): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r3 = dup(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) 0s ago: executing program 1 (id=260): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x58400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000080)='fd/3\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 83.361264][ T5762] cgroup: Unknown subsys name 'net' [ 83.499425][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.195331][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.797362][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.810813][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.820804][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.828939][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.836986][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.844488][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.878122][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.891185][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.898709][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.906946][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.920163][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.940398][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.033535][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.045661][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.053306][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.064179][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.081171][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.088780][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.111844][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.120018][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.128175][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.136599][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.145227][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.152820][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.587398][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.813145][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.824476][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.832417][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.839705][ T5773] bridge_slave_0: entered allmulticast mode [ 87.847082][ T5773] bridge_slave_0: entered promiscuous mode [ 87.861166][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.887590][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.896418][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.903922][ T5773] bridge_slave_1: entered allmulticast mode [ 87.911147][ T5773] bridge_slave_1: entered promiscuous mode [ 87.980894][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.005384][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.024631][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.128675][ T5773] team0: Port device team_slave_0 added [ 88.138024][ T5773] team0: Port device team_slave_1 added [ 88.162347][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.169551][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.176840][ T5776] bridge_slave_0: entered allmulticast mode [ 88.184178][ T5776] bridge_slave_0: entered promiscuous mode [ 88.193025][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.200152][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.207479][ T5776] bridge_slave_1: entered allmulticast mode [ 88.214977][ T5776] bridge_slave_1: entered promiscuous mode [ 88.285948][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.294676][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.302048][ T5779] bridge_slave_0: entered allmulticast mode [ 88.309201][ T5779] bridge_slave_0: entered promiscuous mode [ 88.318104][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.325392][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.332744][ T5779] bridge_slave_1: entered allmulticast mode [ 88.340232][ T5779] bridge_slave_1: entered promiscuous mode [ 88.348374][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.356356][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.385591][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.428862][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.438797][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.446114][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.474057][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.508926][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.540575][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.547763][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.555523][ T5781] bridge_slave_0: entered allmulticast mode [ 88.563268][ T5781] bridge_slave_0: entered promiscuous mode [ 88.572506][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.579663][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.587491][ T5781] bridge_slave_1: entered allmulticast mode [ 88.595231][ T5781] bridge_slave_1: entered promiscuous mode [ 88.604925][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.618193][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.653138][ T5776] team0: Port device team_slave_0 added [ 88.690885][ T5776] team0: Port device team_slave_1 added [ 88.719330][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.733706][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.756497][ T5779] team0: Port device team_slave_0 added [ 88.766758][ T5779] team0: Port device team_slave_1 added [ 88.780989][ T5773] hsr_slave_0: entered promiscuous mode [ 88.788215][ T5773] hsr_slave_1: entered promiscuous mode [ 88.831358][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.838388][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.864980][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.917436][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.924684][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.951897][ T51] Bluetooth: hci0: command tx timeout [ 88.957826][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.989783][ T5781] team0: Port device team_slave_0 added [ 88.999415][ T5781] team0: Port device team_slave_1 added [ 89.006197][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.011939][ T51] Bluetooth: hci1: command tx timeout [ 89.015393][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.044906][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.058440][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.065519][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.092745][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.160614][ T51] Bluetooth: hci2: command tx timeout [ 89.187266][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.194462][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.221890][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.235628][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.242720][ T51] Bluetooth: hci3: command tx timeout [ 89.242719][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.248210][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.298360][ T5776] hsr_slave_0: entered promiscuous mode [ 89.304994][ T5776] hsr_slave_1: entered promiscuous mode [ 89.311446][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.319220][ T5776] Cannot create hsr debugfs directory [ 89.333586][ T5779] hsr_slave_0: entered promiscuous mode [ 89.340186][ T5779] hsr_slave_1: entered promiscuous mode [ 89.347127][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.354810][ T5779] Cannot create hsr debugfs directory [ 89.555057][ T5781] hsr_slave_0: entered promiscuous mode [ 89.561729][ T5781] hsr_slave_1: entered promiscuous mode [ 89.570496][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.581636][ T5781] Cannot create hsr debugfs directory [ 89.836842][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.881223][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.892448][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.915295][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.957963][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.991237][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.018290][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.029454][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.103748][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.116682][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.137176][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.148863][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.263022][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.276462][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.287566][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.299371][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.336664][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.395647][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.419351][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.426847][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.453147][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.460485][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.542873][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.574741][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.620112][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.638430][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.655338][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.662520][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.693920][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.704092][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.711293][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.721395][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.728589][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.750314][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.757445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.859997][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.937076][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.944297][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.985964][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.993203][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.008294][ T51] Bluetooth: hci0: command tx timeout [ 91.055706][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.081235][ T51] Bluetooth: hci1: command tx timeout [ 91.238789][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.251985][ T51] Bluetooth: hci2: command tx timeout [ 91.334372][ T51] Bluetooth: hci3: command tx timeout [ 91.411397][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.435446][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.566682][ T5773] veth0_vlan: entered promiscuous mode [ 91.599174][ T5773] veth1_vlan: entered promiscuous mode [ 91.623823][ T5776] veth0_vlan: entered promiscuous mode [ 91.690254][ T5776] veth1_vlan: entered promiscuous mode [ 91.718810][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.737182][ T5773] veth0_macvtap: entered promiscuous mode [ 91.756431][ T5773] veth1_macvtap: entered promiscuous mode [ 91.767451][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.803207][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.816663][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.868392][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.877671][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.894732][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.903695][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925934][ T5776] veth0_macvtap: entered promiscuous mode [ 91.957671][ T5776] veth1_macvtap: entered promiscuous mode [ 91.999183][ T5779] veth0_vlan: entered promiscuous mode [ 92.042621][ T5781] veth0_vlan: entered promiscuous mode [ 92.054090][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.067494][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.079110][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.086987][ T27] cfg80211: failed to load regulatory.db [ 92.115568][ T5781] veth1_vlan: entered promiscuous mode [ 92.132730][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.143959][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.155711][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.183056][ T5779] veth1_vlan: entered promiscuous mode [ 92.205449][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215061][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.224335][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.234800][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.261208][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.269347][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.336152][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.347665][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.378904][ T5779] veth0_macvtap: entered promiscuous mode [ 92.395972][ T5781] veth0_macvtap: entered promiscuous mode [ 92.422068][ T5781] veth1_macvtap: entered promiscuous mode [ 92.431150][ T5779] veth1_macvtap: entered promiscuous mode [ 92.536614][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.553429][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.572651][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.594748][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.618279][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.645535][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.653865][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.655055][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.687701][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.702681][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.717342][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.738785][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.748069][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.767055][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.778782][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.794042][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.804403][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.820377][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.839989][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.867178][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.883304][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.894444][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.907025][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.967083][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.014000][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.023948][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.034641][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.045376][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.056299][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.074330][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.180941][ T51] Bluetooth: hci0: command tx timeout [ 93.186573][ T51] Bluetooth: hci1: command tx timeout [ 93.324078][ T5775] Bluetooth: hci2: command tx timeout [ 93.405897][ T5775] Bluetooth: hci3: command tx timeout [ 93.539376][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.562709][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.576332][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.585503][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.653268][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.877706][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.922291][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.997350][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.769019][ T5846] atomic_op ffff888023bd9198 conn xmit_atomic 0000000000000000 [ 95.911058][ T5775] Bluetooth: hci1: command tx timeout [ 95.916701][ T51] Bluetooth: hci0: command tx timeout [ 95.920760][ T5778] Bluetooth: hci2: command tx timeout [ 95.922336][ T5775] Bluetooth: hci3: command tx timeout [ 95.931527][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.984876][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.049513][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.563958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.623272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.721227][ T5856] atomic_op ffff88807b06b998 conn xmit_atomic 0000000000000000 [ 100.605694][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.670559][ T28] audit: type=1326 audit(1783917260.626:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz.2.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88ddf9de59 code=0x0 [ 100.804257][ T8] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.828247][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.841508][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 100.860787][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.890332][ T8] usb 1-1: config 0 descriptor?? [ 101.741243][ T5810] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.950549][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 102.012141][ T5810] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 102.252526][ T5810] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.359282][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.483269][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 102.489531][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 103.105138][ T8] usb 1-1: USB disconnect, device number 2 [ 103.653708][ T5810] usb 3-1: USB disconnect, device number 2 [ 105.344879][ T5890] atomic_op ffff888058c48198 conn xmit_atomic 0000000000000000 [ 108.611970][ T5902] atomic_op ffff88802c42e998 conn xmit_atomic 0000000000000000 [ 109.120794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 109.530374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.432232][ T5923] syz.3.26[5923]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 116.800814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.210375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.722716][ T5957] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 124.892235][ T5978] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 130.010316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.891062][ T6000] netem: change failed [ 133.004707][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.011641][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.147331][ T6013] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 134.720833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.130357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.100109][ T6017] atomic_op ffff88807c8e9998 conn xmit_atomic 0000000000000000 [ 137.690483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 137.857268][ T6023] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 141.528858][ T6033] netlink: 'syz.1.46': attribute type 3 has an invalid length. [ 144.523356][ T6058] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 144.591474][ T5808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.861009][ T5808] usb 4-1: device descriptor read/64, error -71 [ 145.082006][ T6063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.210486][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.360523][ T5808] usb 4-1: device descriptor read/64, error -71 [ 145.480718][ T5808] usb usb4-port1: attempt power cycle [ 147.520749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 147.930411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 154.982396][ T6112] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 158.082708][ T6128] netlink: 'syz.2.68': attribute type 3 has an invalid length. [ 158.870734][ T6132] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 169.696491][ T6157] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 171.333928][ T6161] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 174.239793][ T28] audit: type=1326 audit(1783917334.195:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4acbb9de59 code=0x0 [ 174.262963][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.430603][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 174.670341][ T5811] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.698975][ T23] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.712885][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.719819][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 174.729616][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.768265][ T23] usb 3-1: config 0 descriptor?? [ 174.861725][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 174.926453][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 174.950183][ T6179] netlink: 'syz.1.84': attribute type 3 has an invalid length. [ 175.070947][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.084234][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.094493][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.111553][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.130359][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.878921][ T5811] usb 4-1: usb_control_msg returned -71 [ 177.890485][ T5811] usbtmc 4-1:16.0: can't read capabilities [ 177.896538][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 177.907237][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 177.935481][ T5811] usb 4-1: USB disconnect, device number 5 [ 177.941710][ T23] usb 3-1: USB disconnect, device number 3 [ 180.960385][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.160457][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 181.171993][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 181.190413][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.263844][ T23] usb 4-1: config 0 descriptor?? [ 181.276023][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 182.286905][ T23] gspca_sonixj: reg_r err -110 [ 182.307273][ T23] sonixj: probe of 4-1:0.0 failed with error -110 [ 183.504242][ T23] usb 4-1: USB disconnect, device number 6 [ 188.778648][ T6228] netlink: 'syz.3.96': attribute type 3 has an invalid length. [ 193.711409][ T5810] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 193.979878][ T5810] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.040837][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.047509][ T5810] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 194.097460][ T6265] netlink: 'syz.3.105': attribute type 3 has an invalid length. [ 194.116546][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.267813][ T5810] usb 1-1: config 0 descriptor?? [ 194.445495][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451952][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.205660][ T6271] netlink: 'syz.3.107': attribute type 3 has an invalid length. [ 195.503665][ T5810] usbhid 1-1:0.0: can't add hid device: -71 [ 195.509862][ T5810] usbhid: probe of 1-1:0.0 failed with error -71 [ 195.710418][ T5810] usb 1-1: USB disconnect, device number 3 [ 198.933654][ T6290] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 203.243295][ T6297] netlink: 'syz.0.115': attribute type 3 has an invalid length. [ 205.508222][ T6306] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 205.998648][ T6308] fuse: Unknown parameter 'group_i00000000000000000000' [ 208.926676][ T6320] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 208.935142][ T6320] netlink: 224 bytes leftover after parsing attributes in process `syz.1.121'. [ 213.569514][ T6342] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 214.632536][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 214.632541][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 214.636351][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 214.638591][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 217.630093][ T6352] netlink: 'syz.1.127': attribute type 3 has an invalid length. [ 217.819001][ T6358] fuse: Unknown parameter 'group_i00000000000000000000' [ 218.556682][ T6359] atomic_op ffff88807af3b198 conn xmit_atomic 0000000000000000 [ 222.372625][ T6377] atomic_op ffff88807da1c198 conn xmit_atomic 0000000000000000 [ 226.114288][ T6387] netlink: 'syz.0.130': attribute type 3 has an invalid length. [ 236.327935][ T6428] atomic_op ffff888023dde198 conn xmit_atomic 0000000000000000 [ 237.951849][ T6431] fuse: Unknown parameter 'group_i00000000000000000000' [ 239.029899][ T6434] atomic_op ffff88805efc4198 conn xmit_atomic 0000000000000000 [ 241.383267][ T6437] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 241.616184][ T6443] netlink: 'syz.0.153': attribute type 2 has an invalid length. [ 241.624013][ T6443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.153'. [ 242.969711][ T6446] atomic_op ffff8880530db998 conn xmit_atomic 0000000000000000 [ 245.724892][ T28] audit: type=1326 audit(1783917405.675:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f2f79de59 code=0x0 [ 247.620537][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 247.830310][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 247.854023][ T5811] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 247.886438][ T5811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 247.980328][ T5811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.990973][ T5811] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.004488][ T5811] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.014048][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.365596][ T5811] usb 2-1: usb_control_msg returned -71 [ 248.371743][ T5811] usbtmc 2-1:16.0: can't read capabilities [ 248.425467][ T5811] usb 2-1: USB disconnect, device number 2 [ 249.068104][ T6468] netlink: 'syz.3.145': attribute type 3 has an invalid length. [ 250.274337][ T6477] fuse: Unknown parameter 'group_id00000000000000000000' [ 251.950601][ T6484] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 253.389347][ T6495] atomic_op ffff88802f9ad998 conn xmit_atomic 0000000000000000 [ 254.588249][ T6499] netlink: 'syz.3.158': attribute type 2 has an invalid length. [ 254.596131][ T6499] netlink: 224 bytes leftover after parsing attributes in process `syz.3.158'. [ 255.480463][ T6502] atomic_op ffff88802a76b198 conn xmit_atomic 0000000000000000 [ 256.500744][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.507111][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.137105][ T6513] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 261.796090][ T6521] atomic_op ffff88803138a198 conn xmit_atomic 0000000000000000 [ 263.880351][ T6326] Bluetooth: hci4: command 0x1003 tx timeout [ 263.880379][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.143116][ T28] audit: type=1326 audit(1783917425.105:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4acbb9de59 code=0x0 [ 265.513164][ T3063] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 266.239083][ T6541] atomic_op ffff888053163998 conn xmit_atomic 0000000000000000 [ 267.400464][ T3063] usb 4-1: Using ep0 maxpacket: 8 [ 267.426965][ T3063] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 267.458437][ T3063] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.473699][ T3063] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.485193][ T3063] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.508941][ T3063] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.529164][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.865846][ T3063] usb 4-1: usb_control_msg returned -71 [ 267.890976][ T3063] usbtmc 4-1:16.0: can't read capabilities [ 267.968741][ T3063] usb 4-1: USB disconnect, device number 7 [ 269.780627][ T6552] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 272.973913][ T6559] atomic_op ffff88807a6ee198 conn xmit_atomic 0000000000000000 [ 275.124200][ T6566] atomic_op ffff88801afba198 conn xmit_atomic 0000000000000000 [ 282.190493][ T6612] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 284.040624][ T6615] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 285.385166][ T6623] atomic_op ffff8880309b7198 conn xmit_atomic 0000000000000000 [ 287.222452][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.240521][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.248354][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.280374][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.288072][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.298078][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.019394][ T6630] atomic_op ffff88805ef58998 conn xmit_atomic 0000000000000000 [ 289.400996][ T5778] Bluetooth: hci4: command tx timeout [ 290.551469][ T6639] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 291.496139][ T5778] Bluetooth: hci4: command tx timeout [ 292.494100][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.631922][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 293.517915][ T6652] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 294.421868][ T5778] Bluetooth: hci4: command tx timeout [ 294.646761][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.862801][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.007849][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.089009][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.113216][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.134033][ T6626] bridge_slave_0: entered allmulticast mode [ 295.145406][ T6626] bridge_slave_0: entered promiscuous mode [ 295.159837][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.168662][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.182290][ T6626] bridge_slave_1: entered allmulticast mode [ 295.189835][ T6626] bridge_slave_1: entered promiscuous mode [ 296.725745][ T5778] Bluetooth: hci4: command tx timeout [ 296.796815][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.839496][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.996625][ T6626] team0: Port device team_slave_0 added [ 297.690558][ T6665] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 298.112129][ T6626] team0: Port device team_slave_1 added [ 298.263500][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.285190][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.350583][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.392816][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.400083][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.510391][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.105407][ T6626] hsr_slave_0: entered promiscuous mode [ 299.200805][ T6626] hsr_slave_1: entered promiscuous mode [ 299.240810][ T6626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.248446][ T6626] Cannot create hsr debugfs directory [ 303.642705][ T6691] atomic_op ffff8880790bc198 conn xmit_atomic 0000000000000000 [ 308.524217][ T6626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.147516][ T6626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.216783][ T6626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.272301][ T6626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.492846][ T78] hsr_slave_0: left promiscuous mode [ 310.499318][ T78] hsr_slave_1: left promiscuous mode [ 310.509999][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.530401][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.560094][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.580250][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.600739][ T78] bridge_slave_1: left allmulticast mode [ 310.606444][ T78] bridge_slave_1: left promiscuous mode [ 310.636795][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.678397][ T78] bridge_slave_0: left allmulticast mode [ 310.695614][ T78] bridge_slave_0: left promiscuous mode [ 310.782709][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.372822][ T78] veth1_macvtap: left promiscuous mode [ 311.378590][ T78] veth0_macvtap: left promiscuous mode [ 311.396437][ T78] veth1_vlan: left promiscuous mode [ 311.404594][ T78] veth0_vlan: left promiscuous mode [ 312.057285][ T6724] atomic_op ffff888061413198 conn xmit_atomic 0000000000000000 [ 316.180405][ T6743] process 'syz.3.201' launched './file2' with NULL argv: empty string added [ 316.588421][ T78] team0 (unregistering): Port device team_slave_1 removed [ 316.642404][ T78] team0 (unregistering): Port device team_slave_0 removed [ 316.679937][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.723019][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.012365][ T78] bond0 (unregistering): Released all slaves [ 317.324916][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.331453][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.436335][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.502316][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.551834][ T5778] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 317.582760][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.589953][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.653405][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.660660][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.810082][ T6626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.847341][ T6626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.669431][ C0] Unknown status report in ack skb [ 318.973713][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.130412][ T5834] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 319.368456][ T5834] usb 4-1: config index 0 descriptor too short (expected 86, got 72) [ 319.438227][ T5834] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 319.477089][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.500288][ T5834] usb 4-1: Product: syz [ 319.504535][ T5834] usb 4-1: Manufacturer: syz [ 320.295884][ T5834] usb 4-1: SerialNumber: syz [ 320.331510][ T5834] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.534973][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.551640][ T6626] veth0_vlan: entered promiscuous mode [ 320.728132][ T6626] veth1_vlan: entered promiscuous mode [ 321.468193][ T6626] veth0_macvtap: entered promiscuous mode [ 321.542440][ T6626] veth1_macvtap: entered promiscuous mode [ 321.565924][ T6466] usb 4-1: USB disconnect, device number 8 [ 321.603160][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1d [ 321.641468][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 321.648547][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.687620][ T9] ath9k_htc: Failed to initialize the device [ 321.700263][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.719715][ T6466] usb 4-1: ath9k_htc: USB layer deinitialized [ 321.729001][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.756116][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.795536][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.821410][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.852579][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.892511][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.919372][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.950360][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.970267][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.985083][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.995649][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.021860][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.053801][ T6626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.073513][ T6626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.150604][ T6626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.189959][ T6626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.133355][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.188123][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.274773][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.294162][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.338258][ T5084] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 323.349738][ T5084] CPU: 1 PID: 5084 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 323.357509][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.367599][ T5084] Workqueue: hci2 hci_rx_work [ 323.372390][ T5084] Call Trace: [ 323.375713][ T5084] [ 323.378692][ T5084] dump_stack_lvl+0x18c/0x250 [ 323.383431][ T5084] ? show_regs_print_info+0x20/0x20 [ 323.388717][ T5084] ? load_image+0x420/0x420 [ 323.393290][ T5084] sysfs_create_dir_ns+0x26e/0x2a0 [ 323.398457][ T5084] ? __lock_acquire+0x7d80/0x7d80 [ 323.403532][ T5084] ? sysfs_warn_dup+0xa0/0xa0 [ 323.408265][ T5084] ? do_raw_spin_unlock+0x121/0x230 [ 323.413529][ T5084] kobject_add_internal+0x617/0xc90 [ 323.418797][ T5084] kobject_add+0x164/0x240 [ 323.423268][ T5084] ? kobject_init+0x1d0/0x1d0 [ 323.427997][ T5084] ? get_device_parent+0x366/0x390 [ 323.433158][ T5084] device_add+0x3fa/0xc40 [ 323.437538][ T5084] hci_conn_add_sysfs+0xd5/0x1e0 [ 323.442530][ T5084] le_conn_complete_evt+0xe9f/0x1480 [ 323.445914][ T5778] block nbd0: Receive control failed (result -32) [ 323.447899][ T5084] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 323.460805][ T5084] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 323.466515][ T5084] ? mutex_unlock+0x10/0x10 [ 323.471064][ T5084] ? skb_pull_data+0xf0/0x1f0 [ 323.475792][ T5084] hci_le_conn_complete_evt+0x187/0x440 [ 323.481417][ T5084] ? hci_remote_host_features_evt+0x150/0x150 [ 323.487545][ T5084] hci_event_packet+0x7b4/0x1280 [ 323.492540][ T5084] ? __lock_acquire+0x7d80/0x7d80 [ 323.497613][ T5084] ? lock_chain_count+0x20/0x20 [ 323.502543][ T5084] ? bis_list+0x290/0x290 [ 323.506929][ T5084] ? lockdep_hardirqs_on+0x98/0x150 [ 323.512218][ T5084] ? hci_send_to_monitor+0xd7/0x4f0 [ 323.517491][ T5084] hci_rx_work+0x43a/0xd60 [ 323.521986][ T5084] ? process_scheduled_works+0x975/0x1600 [ 323.527769][ T5084] process_scheduled_works+0xa60/0x1600 [ 323.533406][ T5084] ? worker_attach_to_pool+0x370/0x370 [ 323.538933][ T5084] ? assign_work+0x3cc/0x5d0 [ 323.543587][ T5084] worker_thread+0xa5e/0xfe0 [ 323.548260][ T5084] ? _raw_spin_unlock+0x40/0x40 [ 323.553171][ T5084] ? __kthread_parkme+0x71/0x1c0 [ 323.558169][ T5084] kthread+0x2fa/0x390 [ 323.562286][ T5084] ? pr_cont_work+0x550/0x550 [ 323.567020][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 323.571673][ T5084] ret_from_fork+0x48/0x80 [ 323.576145][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 323.580764][ T5084] ret_from_fork_asm+0x11/0x20 [ 323.585572][ T5084] [ 323.598923][ T5084] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 323.613871][ T5084] Bluetooth: hci2: failed to register connection device [ 323.744569][ T28] audit: type=1326 audit(1783917483.705:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76add9de59 code=0x0 [ 323.866208][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 323.879378][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.887950][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.090356][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 324.291495][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 324.302371][ T6855] binder: 6852:6855 ioctl c018620c 200000000080 returned -1 [ 324.322652][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 324.353087][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.378141][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.401530][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.454966][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.491997][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.552761][ T6862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.838880][ T8] usb 5-1: usb_control_msg returned -71 [ 324.948403][ T8] usbtmc 5-1:16.0: can't read capabilities [ 325.306927][ T8] usb 5-1: USB disconnect, device number 2 [ 326.381149][ T5084] block nbd1: Receive control failed (result -32) [ 327.223524][ T6909] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 327.227355][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 328.830648][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 330.554003][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.573512][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 330.591469][ T8] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 330.610081][ T8] usb 2-1: config 0 has no interface number 0 [ 330.618469][ T8] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 330.650313][ T8] usb 2-1: config 0 interface 88 has no altsetting 0 [ 330.669195][ T8] usb 2-1: language id specifier not provided by device, defaulting to English [ 330.685184][ T8] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 330.714154][ T8] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 330.740549][ T8] usb 2-1: Product: syz [ 330.751224][ T8] usb 2-1: SerialNumber: syz [ 330.764227][ T5808] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 330.787009][ T8] usb 2-1: config 0 descriptor?? [ 330.801076][ T6922] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.970484][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 330.988470][ T5808] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 331.027636][ T5808] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 331.038415][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 331.082866][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.104966][ T8] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input5 [ 331.140962][ T5808] usb 1-1: Product: syz [ 331.161499][ T5808] usb 1-1: Manufacturer: syz [ 331.211625][ T5808] usb 1-1: SerialNumber: syz [ 331.253752][ T5808] usb 1-1: config 0 descriptor?? [ 331.267126][ C1] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 331.286345][ T5808] gspca_main: sq930x-2.14.0 probing 2770:930c [ 331.296842][ T8] usb 2-1: USB disconnect, device number 3 [ 331.884851][ T6939] [U]  [ 331.916835][ T5808] gspca_sq930x: reg_r 001f failed -110 [ 331.933147][ T5808] sq930x: probe of 1-1:0.0 failed with error -110 [ 332.182446][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 332.965134][ T6983] syz.4.256[6983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.298296][ C0] ------------[ cut here ]------------ [ 334.315036][ C0] WARNING: CPU: 0 PID: 6995 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 334.325126][ C0] Modules linked in: [ 334.329032][ C0] CPU: 0 PID: 6995 Comm: syz.3.258 Not tainted syzkaller #0 [ 334.336351][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.346446][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 334.352842][ C0] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 334.372528][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 334.378611][ C0] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff88807e419e00 [ 334.386621][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.394655][ C0] RBP: 0000000000000000 R08: ffff88807e419e00 R09: 0000000000000003 [ 334.402702][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f7fa440 [ 334.410747][ C0] R13: ffff88805faeb024 R14: ffff88805f7fa930 R15: ffff88805faeb000 [ 334.418767][ C0] FS: 00007f4acc9a76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 334.427756][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.434376][ C0] CR2: 000000110c44b566 CR3: 00000000621e1000 CR4: 00000000003506f0 [ 334.442382][ C0] Call Trace: [ 334.445687][ C0] [ 334.448550][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 334.454190][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 334.459665][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 334.466471][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 334.472061][ C0] __iterate_interfaces+0x225/0x4c0 [ 334.477277][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 334.483545][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 334.490773][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 334.497016][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 334.504106][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 334.509352][ C0] ? hw_scan_work+0xf10/0xf10 [ 334.514058][ C0] __hrtimer_run_queues+0x525/0xc10 [ 334.519292][ C0] ? hrtimer_interrupt+0x980/0x980 [ 334.524461][ C0] ? read_tsc+0x9/0x20 [ 334.528552][ C0] hrtimer_run_softirq+0x177/0x290 [ 334.533701][ C0] handle_softirqs+0x27d/0x820 [ 334.538466][ C0] ? read_tsc+0x9/0x20 [ 334.542597][ C0] ? ktime_get+0x24b/0x280 [ 334.547054][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 334.551855][ C0] ? do_softirq+0x1a0/0x1a0 [ 334.556375][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 334.561621][ C0] __irq_exit_rcu+0xd3/0x190 [ 334.566219][ C0] ? irq_exit_rcu+0x20/0x20 [ 334.570836][ C0] irq_exit_rcu+0x9/0x20 [ 334.575078][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 334.580825][ C0] [ 334.583763][ C0] [ 334.586696][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.592704][ C0] RIP: 0010:unwind_next_frame+0x505/0x2990 [ 334.598533][ C0] Code: 77 1e e8 be bc 4b 00 eb 96 44 89 f9 80 e1 07 80 c1 03 38 c1 7c bf 4c 89 ff e8 67 34 a4 00 eb b5 e8 a0 bc 4b 00 48 2b 6c 24 40 <48> 89 e9 4c 8b 2c 24 49 bf 00 00 00 00 00 fc ff df 48 8b 6c 24 10 [ 334.618192][ C0] RSP: 0018:ffffc900047de5d8 EFLAGS: 00000246 [ 334.624305][ C0] RAX: ffffffff813b28d0 RBX: ffffffff8ea513e4 RCX: ffff88807e419e00 [ 334.632320][ C0] RDX: 0000000000000000 RSI: ffffffff81ee360e RDI: ffffffff81ee3378 [ 334.640317][ C0] RBP: 0000000000000000 R08: ffffc900047de770 R09: 000000000000000b [ 334.648318][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81ee3378 [ 334.656347][ C0] R13: ffffffff8ea513e8 R14: ffffffff81ee360e R15: ffffffff8ea513e4 [ 334.664350][ C0] ? __kernel_write_iter+0x29e/0x6d0 [ 334.669649][ C0] ? __kernel_write_iter+0x8/0x6d0 [ 334.674817][ C0] ? unwind_next_frame+0x500/0x2990 [ 334.680027][ C0] ? __kernel_write_iter+0x29e/0x6d0 [ 334.685345][ C0] ? __kernel_write_iter+0x8/0x6d0 [ 334.690518][ C0] ? unwind_next_frame+0x500/0x2990 [ 334.695746][ C0] ? __kernel_write_iter+0x29e/0x6d0 [ 334.701083][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 334.706394][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 334.711723][ C0] ? stack_trace_save+0x100/0x100 [ 334.716761][ C0] arch_stack_walk+0x144/0x190 [ 334.721567][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 334.726865][ C0] stack_trace_save+0xaa/0x100 [ 334.731666][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 334.736792][ C0] ? mark_lock+0x94/0x320 [ 334.741203][ C0] save_stack+0x125/0x230 [ 334.745545][ C0] ? __reset_page_owner+0x190/0x190 [ 334.750782][ C0] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 334.757027][ C0] ? post_alloc_hook+0x1c1/0x200 [ 334.762002][ C0] ? get_page_from_freelist+0x2181/0x22a0 [ 334.767729][ C0] ? __alloc_pages+0x1f0/0x460 [ 334.772535][ C0] ? __folio_alloc+0x10/0x20 [ 334.777147][ C0] ? vma_alloc_folio+0x474/0x8f0 [ 334.782136][ C0] ? shmem_alloc_folio+0x1a9/0x2a0 [ 334.787254][ C0] ? shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 334.793175][ C0] ? shmem_get_folio_gfp+0xe1d/0x2b40 [ 334.798570][ C0] ? shmem_write_begin+0xf2/0x430 [ 334.803652][ C0] ? generic_perform_write+0x2fe/0x5c0 [ 334.809121][ C0] ? shmem_file_write_iter+0xfb/0x120 [ 334.814619][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 334.819941][ C0] ? get_page_from_freelist+0x67b/0x22a0 [ 334.825604][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 334.830661][ C0] ? do_raw_spin_trylock+0xb2/0x190 [ 334.835876][ C0] __set_page_owner+0x1d/0x60 [ 334.840583][ C0] post_alloc_hook+0x1c1/0x200 [ 334.845365][ C0] get_page_from_freelist+0x2181/0x22a0 [ 334.850983][ C0] ? verify_lock_unused+0x140/0x140 [ 334.856232][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 334.861647][ C0] __alloc_pages+0x1f0/0x460 [ 334.866244][ C0] ? zone_statistics+0x170/0x170 [ 334.871257][ C0] __folio_alloc+0x10/0x20 [ 334.875679][ C0] vma_alloc_folio+0x474/0x8f0 [ 334.880473][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 334.886284][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 334.891276][ C0] ? folio_put+0xd0/0xd0 [ 334.895561][ C0] ? __vm_enough_memory+0x11a/0x370 [ 334.900801][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 334.906377][ C0] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 334.912150][ C0] ? put_swap_device+0x230/0x230 [ 334.917124][ C0] ? xas_load+0x12b/0x140 [ 334.921517][ C0] ? filemap_get_entry+0xce/0x3f0 [ 334.926550][ C0] ? filemap_get_entry+0xce/0x3f0 [ 334.931609][ C0] ? filemap_get_entry+0x375/0x3f0 [ 334.936730][ C0] ? page_cache_prev_miss+0x390/0x390 [ 334.942143][ C0] shmem_get_folio_gfp+0xe1d/0x2b40 [ 334.947370][ C0] shmem_write_begin+0xf2/0x430 [ 334.952260][ C0] generic_perform_write+0x2fe/0x5c0 [ 334.957568][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 334.963398][ C0] ? down_write+0x16e/0x200 [ 334.967912][ C0] ? file_update_time+0x98/0x1a0 [ 334.972885][ C0] shmem_file_write_iter+0xfb/0x120 [ 334.978091][ C0] __kernel_write_iter+0x29f/0x6d0 [ 334.983245][ C0] ? vfs_read+0x990/0x990 [ 334.987584][ C0] ? get_dump_page+0x156/0x200 [ 334.992425][ C0] ? __asan_memset+0x22/0x40 [ 334.997029][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 335.001750][ C0] dump_user_range+0x418/0x840 [ 335.006545][ C0] ? dump_skip+0x40/0x40 [ 335.010806][ C0] ? dump_emit+0x78/0xe0 [ 335.015078][ C0] ? dump_emit+0xa6/0xe0 [ 335.019360][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 335.024398][ C0] elf_core_dump+0x320e/0x37c0 [ 335.029194][ C0] ? load_elf_binary+0x2850/0x2850 [ 335.034354][ C0] ? verify_lock_unused+0x140/0x140 [ 335.039568][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 335.044644][ C0] ? mas_next_slot+0x94c/0x980 [ 335.049433][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 335.054918][ C0] ? 0xffffffffff600000 [ 335.059109][ C0] do_coredump+0x1791/0x24a0 [ 335.063760][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 335.068895][ C0] ? lock_chain_count+0x20/0x20 [ 335.073779][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.078986][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 335.084213][ C0] get_signal+0x10da/0x1390 [ 335.088774][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 335.094382][ C0] ? get_sigframe_size+0x20/0x20 [ 335.099338][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 335.105362][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 335.110862][ C0] exit_to_user_mode_loop+0x70/0x110 [ 335.116166][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 335.121839][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 335.127309][ C0] exc_page_fault+0x8c/0x100 [ 335.131935][ C0] asm_exc_page_fault+0x26/0x30 [ 335.136830][ C0] RIP: 0033:0x7f4acbb9de61 [ 335.141303][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 335.160942][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 335.167017][ C0] RAX: 0000000000000000 RBX: 00007f4acbe26090 RCX: 00007f4acbb9de59 [ 335.175018][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 335.183020][ C0] RBP: 00007f4acbc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 335.191139][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.199120][ C0] R13: 00007f4acbe26128 R14: 00007f4acbe26090 R15: 00007ffd7a1eb528 [ 335.207139][ C0] [ 335.210247][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 335.217528][ C0] CPU: 0 PID: 6995 Comm: syz.3.258 Not tainted syzkaller #0 [ 335.224821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.234883][ C0] Call Trace: [ 335.238177][ C0] [ 335.241050][ C0] dump_stack_lvl+0x18c/0x250 [ 335.245744][ C0] ? show_regs_print_info+0x20/0x20 [ 335.250963][ C0] ? load_image+0x420/0x420 [ 335.255508][ C0] panic+0x2ca/0x720 [ 335.259406][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 335.263946][ C0] __warn+0x2e0/0x470 [ 335.267927][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 335.273651][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 335.279378][ C0] report_bug+0x2be/0x4f0 [ 335.283734][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 335.289462][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 335.295184][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 335.300926][ C0] handle_bug+0xcf/0x120 [ 335.305180][ C0] exc_invalid_op+0x1a/0x50 [ 335.309679][ C0] asm_exc_invalid_op+0x1a/0x20 [ 335.314546][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 335.320883][ C0] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 335.340497][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 335.346586][ C0] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff88807e419e00 [ 335.354570][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.362579][ C0] RBP: 0000000000000000 R08: ffff88807e419e00 R09: 0000000000000003 [ 335.370561][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f7fa440 [ 335.378558][ C0] R13: ffff88805faeb024 R14: ffff88805f7fa930 R15: ffff88805faeb000 [ 335.386542][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 335.392277][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 335.398001][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 335.403557][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 335.409068][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 335.415846][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 335.421407][ C0] __iterate_interfaces+0x225/0x4c0 [ 335.426624][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 335.432881][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 335.440090][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 335.446337][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 335.453379][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 335.458571][ C0] ? hw_scan_work+0xf10/0xf10 [ 335.463250][ C0] __hrtimer_run_queues+0x525/0xc10 [ 335.468465][ C0] ? hrtimer_interrupt+0x980/0x980 [ 335.473581][ C0] ? read_tsc+0x9/0x20 [ 335.477682][ C0] hrtimer_run_softirq+0x177/0x290 [ 335.482889][ C0] handle_softirqs+0x27d/0x820 [ 335.487654][ C0] ? read_tsc+0x9/0x20 [ 335.491724][ C0] ? ktime_get+0x24b/0x280 [ 335.496147][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 335.500933][ C0] ? do_softirq+0x1a0/0x1a0 [ 335.505439][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 335.510645][ C0] __irq_exit_rcu+0xd3/0x190 [ 335.515232][ C0] ? irq_exit_rcu+0x20/0x20 [ 335.519748][ C0] irq_exit_rcu+0x9/0x20 [ 335.523992][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 335.529633][ C0] [ 335.532573][ C0] [ 335.535533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.541534][ C0] RIP: 0010:unwind_next_frame+0x505/0x2990 [ 335.547352][ C0] Code: 77 1e e8 be bc 4b 00 eb 96 44 89 f9 80 e1 07 80 c1 03 38 c1 7c bf 4c 89 ff e8 67 34 a4 00 eb b5 e8 a0 bc 4b 00 48 2b 6c 24 40 <48> 89 e9 4c 8b 2c 24 49 bf 00 00 00 00 00 fc ff df 48 8b 6c 24 10 [ 335.566966][ C0] RSP: 0018:ffffc900047de5d8 EFLAGS: 00000246 [ 335.573034][ C0] RAX: ffffffff813b28d0 RBX: ffffffff8ea513e4 RCX: ffff88807e419e00 [ 335.581005][ C0] RDX: 0000000000000000 RSI: ffffffff81ee360e RDI: ffffffff81ee3378 [ 335.588977][ C0] RBP: 0000000000000000 R08: ffffc900047de770 R09: 000000000000000b [ 335.596968][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81ee3378 [ 335.604938][ C0] R13: ffffffff8ea513e8 R14: ffffffff81ee360e R15: ffffffff8ea513e4 [ 335.612914][ C0] ? __kernel_write_iter+0x29e/0x6d0 [ 335.618208][ C0] ? __kernel_write_iter+0x8/0x6d0 [ 335.623340][ C0] ? unwind_next_frame+0x500/0x2990 [ 335.628540][ C0] ? __kernel_write_iter+0x29e/0x6d0 [ 335.633844][ C0] ? __kernel_write_iter+0x8/0x6d0 [ 335.638963][ C0] ? unwind_next_frame+0x500/0x2990 [ 335.644162][ C0] ? __kernel_write_iter+0x29e/0x6d0 [ 335.649472][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 335.654777][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 335.660068][ C0] ? stack_trace_save+0x100/0x100 [ 335.665095][ C0] arch_stack_walk+0x144/0x190 [ 335.669869][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 335.675159][ C0] stack_trace_save+0xaa/0x100 [ 335.679930][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 335.685043][ C0] ? mark_lock+0x94/0x320 [ 335.689379][ C0] save_stack+0x125/0x230 [ 335.693710][ C0] ? __reset_page_owner+0x190/0x190 [ 335.698913][ C0] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 335.705152][ C0] ? post_alloc_hook+0x1c1/0x200 [ 335.710101][ C0] ? get_page_from_freelist+0x2181/0x22a0 [ 335.715839][ C0] ? __alloc_pages+0x1f0/0x460 [ 335.720602][ C0] ? __folio_alloc+0x10/0x20 [ 335.725183][ C0] ? vma_alloc_folio+0x474/0x8f0 [ 335.730117][ C0] ? shmem_alloc_folio+0x1a9/0x2a0 [ 335.735263][ C0] ? shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 335.741162][ C0] ? shmem_get_folio_gfp+0xe1d/0x2b40 [ 335.746537][ C0] ? shmem_write_begin+0xf2/0x430 [ 335.751569][ C0] ? generic_perform_write+0x2fe/0x5c0 [ 335.757034][ C0] ? shmem_file_write_iter+0xfb/0x120 [ 335.762414][ C0] ? __kernel_write_iter+0x29f/0x6d0 [ 335.767713][ C0] ? get_page_from_freelist+0x67b/0x22a0 [ 335.773353][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 335.778486][ C0] ? do_raw_spin_trylock+0xb2/0x190 [ 335.783713][ C0] __set_page_owner+0x1d/0x60 [ 335.788417][ C0] post_alloc_hook+0x1c1/0x200 [ 335.793193][ C0] get_page_from_freelist+0x2181/0x22a0 [ 335.798756][ C0] ? verify_lock_unused+0x140/0x140 [ 335.803964][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 335.809357][ C0] __alloc_pages+0x1f0/0x460 [ 335.813948][ C0] ? zone_statistics+0x170/0x170 [ 335.818902][ C0] __folio_alloc+0x10/0x20 [ 335.823337][ C0] vma_alloc_folio+0x474/0x8f0 [ 335.828112][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 335.833934][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 335.838906][ C0] ? folio_put+0xd0/0xd0 [ 335.843173][ C0] ? __vm_enough_memory+0x11a/0x370 [ 335.848382][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 335.854028][ C0] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 335.859753][ C0] ? put_swap_device+0x230/0x230 [ 335.864693][ C0] ? xas_load+0x12b/0x140 [ 335.869019][ C0] ? filemap_get_entry+0xce/0x3f0 [ 335.874039][ C0] ? filemap_get_entry+0xce/0x3f0 [ 335.879067][ C0] ? filemap_get_entry+0x375/0x3f0 [ 335.884180][ C0] ? page_cache_prev_miss+0x390/0x390 [ 335.889570][ C0] shmem_get_folio_gfp+0xe1d/0x2b40 [ 335.894785][ C0] shmem_write_begin+0xf2/0x430 [ 335.899642][ C0] generic_perform_write+0x2fe/0x5c0 [ 335.904940][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 335.910757][ C0] ? down_write+0x16e/0x200 [ 335.915266][ C0] ? file_update_time+0x98/0x1a0 [ 335.920226][ C0] shmem_file_write_iter+0xfb/0x120 [ 335.925447][ C0] __kernel_write_iter+0x29f/0x6d0 [ 335.930652][ C0] ? vfs_read+0x990/0x990 [ 335.935075][ C0] ? get_dump_page+0x156/0x200 [ 335.939879][ C0] ? __asan_memset+0x22/0x40 [ 335.944485][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 335.949172][ C0] dump_user_range+0x418/0x840 [ 335.953942][ C0] ? dump_skip+0x40/0x40 [ 335.958174][ C0] ? dump_emit+0x78/0xe0 [ 335.962437][ C0] ? dump_emit+0xa6/0xe0 [ 335.966686][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 335.971628][ C0] elf_core_dump+0x320e/0x37c0 [ 335.976421][ C0] ? load_elf_binary+0x2850/0x2850 [ 335.981542][ C0] ? verify_lock_unused+0x140/0x140 [ 335.986750][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 335.991796][ C0] ? mas_next_slot+0x94c/0x980 [ 335.996602][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 336.002250][ C0] ? 0xffffffffff600000 [ 336.006432][ C0] do_coredump+0x1791/0x24a0 [ 336.011054][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 336.016222][ C0] ? lock_chain_count+0x20/0x20 [ 336.021119][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.026334][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 336.031562][ C0] get_signal+0x10da/0x1390 [ 336.036084][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 336.041646][ C0] ? get_sigframe_size+0x20/0x20 [ 336.046604][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 336.052594][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 336.058152][ C0] exit_to_user_mode_loop+0x70/0x110 [ 336.063463][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 336.069017][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 336.074479][ C0] exc_page_fault+0x8c/0x100 [ 336.079077][ C0] asm_exc_page_fault+0x26/0x30 [ 336.083947][ C0] RIP: 0033:0x7f4acbb9de61 [ 336.088381][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 336.108001][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 336.114075][ C0] RAX: 0000000000000000 RBX: 00007f4acbe26090 RCX: 00007f4acbb9de59 [ 336.122048][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 336.130049][ C0] RBP: 00007f4acbc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 336.138027][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.146010][ C0] R13: 00007f4acbe26128 R14: 00007f4acbe26090 R15: 00007ffd7a1eb528 [ 336.154006][ C0] [ 336.157624][ C0] Kernel Offset: disabled [ 336.162003][ C0] Rebooting in 86400 seconds..