last executing test programs: 15.090842069s ago: executing program 0 (id=464): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 13.950705815s ago: executing program 2 (id=469): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22582) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x0, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) 13.51197061s ago: executing program 2 (id=471): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xfdd10fa1e09aff70, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x764}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.367048217s ago: executing program 2 (id=473): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x4081ff) 11.27087879s ago: executing program 0 (id=476): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x67}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x351a, 0x100, 0x0, 0x0, 0x0) 11.048726763s ago: executing program 2 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x200}, 0x18}, 0x1, 0x0, 0x0, 0x20040012}, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r6, 0x1) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) setgroups(0xffffffffffffff79, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2606c0c0) close_range(r5, 0xffffffffffffffff, 0x0) 10.182811253s ago: executing program 0 (id=479): r0 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) 9.799957675s ago: executing program 2 (id=481): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xfdd10fa1e09aff70, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x764}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.306757203s ago: executing program 0 (id=483): syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x20200, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x4f23, 0x7f, 0x1, 0x3, 0x1, 0xdea7, 0xc, 0x3, 0xa, 0xa6, 0xfffffffa, 0xffffffff, 0x401, 0x8000001, 0x6, 0x101, 0xf7fffffe, 0x5, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x5, 0x800081, 0x0, 0x4]}) 9.302981443s ago: executing program 2 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 6.386165381s ago: executing program 3 (id=488): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 5.390721089s ago: executing program 1 (id=489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.428869035s ago: executing program 3 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x400, 0x0, 0x6, 0x0, 0x8e3], 0xffff1001, 0x43100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x8000000000000001, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x7, 0x8000000009, 0x803, 0x2, 0x5], 0xeeee8000}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xffff1000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0xc, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.346468219s ago: executing program 1 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) close(r2) 4.306732081s ago: executing program 0 (id=492): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xfdd10fa1e09aff70, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x764}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.406795363s ago: executing program 1 (id=493): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) 3.326201078s ago: executing program 0 (id=494): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65", 0x60, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 3.105472601s ago: executing program 3 (id=495): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2.577939111s ago: executing program 3 (id=496): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt(r1, 0x7, 0x8, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048055}, 0x0) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40020, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2f947e0a0f4328e7}}) pread64(r5, &(0x7f0000000080)=""/237, 0xed, 0x5) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d9070000", 0x6) 2.177480834s ago: executing program 1 (id=497): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.72559802s ago: executing program 1 (id=498): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 1.366823541s ago: executing program 1 (id=499): r0 = userfaultfd(0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1.366400161s ago: executing program 3 (id=500): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 0s ago: executing program 3 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r0, 0x8b1a, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 81.605568][ T5753] cgroup: Unknown subsys name 'net' [ 81.769006][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.480653][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.165678][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.174845][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.182396][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.191230][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.199593][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.207730][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.215366][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.256883][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.265198][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.281381][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.289232][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.298073][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.358690][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.366800][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.380469][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.389032][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.398580][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.406588][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.425744][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.434503][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.442420][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.451611][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.459491][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.468074][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.790293][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 85.962358][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.022134][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.030130][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.038150][ T5764] bridge_slave_0: entered allmulticast mode [ 86.045975][ T5764] bridge_slave_0: entered promiscuous mode [ 86.056761][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.064265][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.071798][ T5764] bridge_slave_1: entered allmulticast mode [ 86.079326][ T5764] bridge_slave_1: entered promiscuous mode [ 86.168443][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.194206][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.238292][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.278433][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.298721][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.306440][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.319735][ T5768] bridge_slave_0: entered allmulticast mode [ 86.328112][ T5768] bridge_slave_0: entered promiscuous mode [ 86.356721][ T5764] team0: Port device team_slave_0 added [ 86.370423][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.377642][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.385935][ T5768] bridge_slave_1: entered allmulticast mode [ 86.393459][ T5768] bridge_slave_1: entered promiscuous mode [ 86.413874][ T5764] team0: Port device team_slave_1 added [ 86.449975][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.457079][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.483883][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.527048][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.551603][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.563493][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.570997][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.597249][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.650602][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.657840][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.665192][ T5773] bridge_slave_0: entered allmulticast mode [ 86.672772][ T5773] bridge_slave_0: entered promiscuous mode [ 86.712721][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.719930][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.727556][ T5773] bridge_slave_1: entered allmulticast mode [ 86.734800][ T5773] bridge_slave_1: entered promiscuous mode [ 86.756374][ T5768] team0: Port device team_slave_0 added [ 86.766912][ T5768] team0: Port device team_slave_1 added [ 86.843864][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.851621][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.858825][ T5777] bridge_slave_0: entered allmulticast mode [ 86.866370][ T5777] bridge_slave_0: entered promiscuous mode [ 86.885190][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.892789][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.919138][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.955036][ T5764] hsr_slave_0: entered promiscuous mode [ 86.980768][ T5764] hsr_slave_1: entered promiscuous mode [ 87.010125][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.020519][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.027672][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.041349][ T5777] bridge_slave_1: entered allmulticast mode [ 87.048809][ T5777] bridge_slave_1: entered promiscuous mode [ 87.069325][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.076786][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.103272][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.139668][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.170124][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.230097][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.272727][ T5773] team0: Port device team_slave_0 added [ 87.285093][ T5767] Bluetooth: hci0: command tx timeout [ 87.318329][ T5773] team0: Port device team_slave_1 added [ 87.341890][ T5777] team0: Port device team_slave_0 added [ 87.359811][ T5777] team0: Port device team_slave_1 added [ 87.365732][ T5767] Bluetooth: hci1: command tx timeout [ 87.400465][ T5768] hsr_slave_0: entered promiscuous mode [ 87.407162][ T5768] hsr_slave_1: entered promiscuous mode [ 87.419118][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.427963][ T5768] Cannot create hsr debugfs directory [ 87.440359][ T5767] Bluetooth: hci2: command tx timeout [ 87.512837][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.519855][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.546337][ T5767] Bluetooth: hci3: command tx timeout [ 87.560519][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.599470][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.606975][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.633356][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.645506][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.653149][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.680392][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.709249][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.716557][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.742625][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.856220][ T5773] hsr_slave_0: entered promiscuous mode [ 87.863158][ T5773] hsr_slave_1: entered promiscuous mode [ 87.869323][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.878316][ T5773] Cannot create hsr debugfs directory [ 87.955633][ T5777] hsr_slave_0: entered promiscuous mode [ 87.962620][ T5777] hsr_slave_1: entered promiscuous mode [ 87.968944][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.976815][ T5777] Cannot create hsr debugfs directory [ 88.163403][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.201980][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.249715][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.266109][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.379122][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.390912][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.417560][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.427821][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.502674][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.515953][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.526368][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.540789][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.652317][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.665233][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.695942][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.721406][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.811038][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.901511][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.913630][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.928699][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.936164][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.954998][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.993763][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.001044][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.023012][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.037620][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.074208][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.081442][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.094622][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.102204][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.120856][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.143111][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.150321][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.184770][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.191980][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.224486][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.268347][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.275657][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.326638][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.333841][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.360502][ T5767] Bluetooth: hci0: command tx timeout [ 89.441382][ T5767] Bluetooth: hci1: command tx timeout [ 89.515009][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.537417][ T5767] Bluetooth: hci2: command tx timeout [ 89.601927][ T5767] Bluetooth: hci3: command tx timeout [ 89.886106][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.968136][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.002419][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.076319][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.098551][ T5764] veth0_vlan: entered promiscuous mode [ 90.138406][ T5764] veth1_vlan: entered promiscuous mode [ 90.185705][ T5773] veth0_vlan: entered promiscuous mode [ 90.240202][ T5768] veth0_vlan: entered promiscuous mode [ 90.255611][ T5773] veth1_vlan: entered promiscuous mode [ 90.262742][ T5777] veth0_vlan: entered promiscuous mode [ 90.291750][ T5768] veth1_vlan: entered promiscuous mode [ 90.306110][ T5777] veth1_vlan: entered promiscuous mode [ 90.324751][ T5764] veth0_macvtap: entered promiscuous mode [ 90.352759][ T5764] veth1_macvtap: entered promiscuous mode [ 90.407580][ T5768] veth0_macvtap: entered promiscuous mode [ 90.416835][ T5773] veth0_macvtap: entered promiscuous mode [ 90.430950][ T5773] veth1_macvtap: entered promiscuous mode [ 90.463250][ T5777] veth0_macvtap: entered promiscuous mode [ 90.472412][ T5768] veth1_macvtap: entered promiscuous mode [ 90.485436][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.515650][ T5777] veth1_macvtap: entered promiscuous mode [ 90.528822][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.549551][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.560863][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.573884][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.589031][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.599817][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.611061][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.621633][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.633615][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.646552][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.656377][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.666626][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.677040][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.691484][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.702707][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.717919][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.732478][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.743603][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.753621][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.764829][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.776512][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.796400][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806581][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.818701][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.827880][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.845413][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.855046][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.864814][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.873637][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.915632][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.927724][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.938637][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.951110][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.961559][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.972072][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.984388][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.009242][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.032962][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.046377][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.061866][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.072182][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.082771][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.094585][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.125086][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.138362][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.147439][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.163938][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.238609][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.277344][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.324387][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.352146][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.384176][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.410740][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.441096][ T5767] Bluetooth: hci0: command tx timeout [ 91.454174][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.463386][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.522399][ T5767] Bluetooth: hci1: command tx timeout [ 91.547248][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.560533][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.583072][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.602380][ T5767] Bluetooth: hci2: command tx timeout [ 91.620893][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.680351][ T5767] Bluetooth: hci3: command tx timeout [ 91.706898][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.717222][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.741330][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.774097][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.009639][ T967] cfg80211: failed to load regulatory.db [ 92.081971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.100807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.665285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.667026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.683965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.870948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.886950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.076953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.281021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 93.690221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 94.100648][ T5767] Bluetooth: hci0: command tx timeout [ 94.106160][ T5767] Bluetooth: hci1: command tx timeout [ 94.117510][ T5767] Bluetooth: hci2: command tx timeout [ 94.121359][ T51] Bluetooth: hci3: command tx timeout [ 95.364953][ T5868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.932096][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.448637][ T5876] syz.1.8 (5876) used greatest stack depth: 17864 bytes left [ 98.259109][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.720465][ T5899] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.838791][ T5898] macsec1: entered promiscuous mode [ 98.844131][ T5898] macsec1: entered allmulticast mode [ 101.148832][ T5911] syz.0.16[5911]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 101.163373][ T5911] loop0: detected capacity change from 0 to 128 [ 101.175448][ T5911] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.207467][ T5911] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.572278][ T5921] input: syz1 as /devices/virtual/input/input5 [ 102.366283][ T5919] loop0: detected capacity change from 0 to 40427 [ 102.521422][ T5919] F2FS-fs (loop0): invalid crc value [ 102.634897][ T5919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.809346][ T5943] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 103.270849][ T5941] fscrypt: Error allocating hmac(sha512): -2 [ 103.541677][ T5936] netlink: 71 bytes leftover after parsing attributes in process `syz.3.13'. [ 103.748582][ T5919] F2FS-fs (loop0): Start checkpoint disabled! [ 103.792744][ T5919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 104.003821][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.052435][ T5958] Bluetooth: MGMT ver 1.22 [ 104.210505][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 104.258350][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.304864][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.338931][ T787] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 104.366548][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.460598][ T787] usb 2-1: config 0 descriptor?? [ 105.888550][ T5977] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 105.979617][ T787] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 105.999590][ T787] usb 2-1: USB disconnect, device number 2 [ 106.401984][ T5986] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 106.829435][ T5984] fscrypt: Error allocating hmac(sha512): -2 [ 107.147530][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 107.735518][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 108.765092][ T6004] loop3: detected capacity change from 0 to 512 [ 108.812504][ T6004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.835173][ T6004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 108.850555][ T6004] System zones: 1-2, 4-12, 8-8 [ 108.861959][ T6004] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.39: iget: bad i_size value: 38620345925642 [ 108.881881][ T6004] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.39: couldn't read orphan inode 15 (err -117) [ 108.901514][ T6004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.991465][ T5983] loop0: detected capacity change from 0 to 32768 [ 109.164874][ T5983] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 109.766321][ T6011] Zero length message leads to an empty skb [ 109.989066][ T6003] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.39: bg 0: block 5: invalid block bitmap [ 110.394435][ T6003] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1280 with max blocks 64 with error 28 [ 110.407448][ T6003] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.407448][ T6003] [ 110.417204][ T6003] EXT4-fs (loop3): Total free blocks count 0 [ 110.423221][ T6003] EXT4-fs (loop3): Free/Dirty block details [ 110.429204][ T6003] EXT4-fs (loop3): free_blocks=0 [ 110.434243][ T6003] EXT4-fs (loop3): dirty_blocks=64 [ 110.439369][ T6003] EXT4-fs (loop3): Block reservation details [ 110.445411][ T6003] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 110.631156][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.513146][ T6030] netlink: 71 bytes leftover after parsing attributes in process `syz.3.46'. [ 111.600940][ T6028] loop0: detected capacity change from 0 to 4096 [ 111.638334][ T6028] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.083388][ T6028] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.135828][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.405857][ T6053] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 112.899896][ T6055] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 113.289906][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.008501][ T6048] loop3: detected capacity change from 0 to 40427 [ 114.056369][ T6048] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.272080][ T6048] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 114.827664][ T6048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.967502][ T6048] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 115.908630][ T6101] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 118.792660][ T6113] loop2: detected capacity change from 0 to 2048 [ 119.009587][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.120933][ T6113] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.279892][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.819038][ T6123] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 121.827586][ T6123] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 121.836171][ T6123] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 122.742502][ T6142] netlink: 71 bytes leftover after parsing attributes in process `syz.2.67'. [ 123.478938][ T6158] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 125.380936][ T6160] loop2: detected capacity change from 0 to 1024 [ 126.017003][ T6163] loop3: detected capacity change from 0 to 256 [ 126.036869][ T6160] hfsplus: failed to load root directory [ 127.637075][ T6169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.76'. [ 130.669386][ T6187] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 130.820364][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.130467][ T23] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 131.202528][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.669980][ T23] usb 3-1: config 0 descriptor?? [ 131.966004][ T9] IPVS: starting estimator thread 0... [ 132.463945][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 132.603537][ T6204] IPVS: using max 19 ests per chain, 45600 per kthread [ 133.458708][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.470298][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.023505][ T6221] input: syz1 as /devices/virtual/input/input6 [ 137.234372][ T23] pegasus 3-1:0.0: setup Pegasus II specific registers [ 137.705371][ T23] pegasus 3-1:0.0: can't locate MII phy, using default [ 137.896707][ T23] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, f6:47:2f:2e:bf:0c [ 137.908569][ T23] usb 3-1: USB disconnect, device number 2 [ 138.314547][ T6232] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 139.721209][ T6253] ptrace attach of "./syz-executor exec"[5777] was attempted by ""[6253] [ 140.165722][ T6254] vxcan1: entered promiscuous mode [ 143.469406][ T6272] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 143.501958][ T6273] autofs4:pid:6273:autofs_fill_super: called with bogus options [ 148.215802][ T6283] loop3: detected capacity change from 0 to 32768 [ 148.268009][ T6289] loop2: detected capacity change from 0 to 32768 [ 148.277811][ T6289] ======================================================= [ 148.277811][ T6289] WARNING: The mand mount option has been deprecated and [ 148.277811][ T6289] and is ignored by this kernel. Remove the mand [ 148.277811][ T6289] option from the mount to silence this warning. [ 148.277811][ T6289] ======================================================= [ 148.553628][ T6289] JBD2: Ignoring recovery information on journal [ 148.656168][ T6296] add_index: next_index = 0. Resetting! [ 148.662334][ T6296] find_entry called with index >= next_index [ 148.668416][ T6296] find_entry called with index >= next_index [ 148.674595][ T6296] find_entry called with index >= next_index [ 148.680927][ T6296] find_entry called with index >= next_index [ 148.737640][ T6296] find_entry called with index >= next_index [ 148.743851][ T6296] find_entry called with index >= next_index [ 148.749916][ T6296] find_entry called with index >= next_index [ 148.756104][ T6296] find_entry called with index >= next_index [ 148.762250][ T6296] find_entry called with index >= next_index [ 148.768352][ T6296] find_entry called with index >= next_index [ 148.774498][ T6296] find_entry called with index >= next_index [ 149.322810][ T6289] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.847063][ T5764] ocfs2: Unmounting device (7,2) on (node local) [ 155.057295][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 155.225276][ T6338] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 155.300540][ T6338] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 155.628746][ T6344] loop2: detected capacity change from 0 to 4096 [ 157.934325][ T6356] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 162.001435][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.950347][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 163.023376][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 163.070189][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.102413][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.179894][ T5836] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 163.210240][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.227856][ T6389] loop2: detected capacity change from 0 to 128 [ 163.255236][ T5836] usb 1-1: Product: syz [ 163.259491][ T5836] usb 1-1: Manufacturer: syz [ 163.275628][ T6389] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.304282][ T5836] usb 1-1: SerialNumber: syz [ 163.322105][ T5836] usb 1-1: config 0 descriptor?? [ 163.338429][ T6389] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.446450][ T5969] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.617560][ T9] usb 1-1: USB disconnect, device number 2 [ 164.172289][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 164.488389][ T6409] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 165.052298][ T6413] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 166.821458][ T6428] loop6: detected capacity change from 0 to 7 [ 166.853346][ T5765] Dev loop6: unable to read RDB block 7 [ 166.859209][ T5765] loop6: AHDI p1 p2 [ 166.884883][ T5765] loop6: partition table partially beyond EOD, truncated [ 166.900701][ T5765] loop6: p1 start 512 is beyond EOD, truncated [ 166.935470][ T6428] Dev loop6: unable to read RDB block 7 [ 166.950265][ T6428] loop6: AHDI p1 p2 [ 166.956341][ T6428] loop6: partition table partially beyond EOD, truncated [ 166.964784][ T6428] loop6: p1 start 512 is beyond EOD, truncated [ 167.587866][ T6445] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 167.811339][ T27] IPVS: starting estimator thread 0... [ 167.910508][ T6447] IPVS: using max 18 ests per chain, 43200 per kthread [ 169.476154][ T6458] netlink: 71 bytes leftover after parsing attributes in process `syz.0.155'. [ 170.237259][ T6468] loop3: detected capacity change from 0 to 1024 [ 170.255269][ T6468] hfsplus: unable to parse mount options [ 171.200510][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.909998][ T6474] overlayfs: upper fs does not support file handles, falling back to index=off. [ 174.187524][ T6485] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 175.074495][ T6499] netlink: 71 bytes leftover after parsing attributes in process `syz.0.168'. [ 178.853268][ T6530] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 185.043939][ T6573] syz.3.186: attempt to access beyond end of device [ 185.043939][ T6573] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 185.044114][ T6573] qnx6: unable to read the first superblock [ 185.044405][ T6573] syz.3.186: attempt to access beyond end of device [ 185.044405][ T6573] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 185.044432][ T6573] qnx6: unable to read the first superblock [ 185.044441][ T6573] qnx6: unable to read the first superblock [ 185.121369][ T5836] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 185.134017][ T6575] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 185.311403][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 185.353013][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.390836][ T5836] usb 2-1: config 4 interface 0 has no altsetting 0 [ 185.416258][ T5836] usb 2-1: string descriptor 0 read error: -22 [ 185.416331][ T5836] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 185.416348][ T5836] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 185.426207][ T5836] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 185.454601][ T5836] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.455134][ T5836] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 185.455220][ T5836] usb 2-1: media controller created [ 185.551343][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.586921][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 185.870446][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.066910][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 186.066945][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.066967][ T27] usb 1-1: Product: syz [ 186.066982][ T27] usb 1-1: Manufacturer: syz [ 186.066998][ T27] usb 1-1: SerialNumber: syz [ 186.330310][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 186.338264][ T6587] block device autoloading is deprecated and will be removed. [ 186.351268][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 186.655906][ T5836] zl10353_read_register: readreg error (reg=127, ret==0) [ 186.850852][ T5836] usb 2-1: USB disconnect, device number 3 [ 186.898673][ T6594] netlink: 71 bytes leftover after parsing attributes in process `syz.2.191'. [ 187.067164][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 187.092619][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 187.125726][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 187.157765][ T27] lan78xx: probe of 1-1:1.0 failed with error -71 [ 187.186389][ T27] usb 1-1: USB disconnect, device number 3 [ 187.897193][ T6610] Invalid ELF header type: 3 != 1 [ 188.204448][ T6609] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 189.082688][ T28] audit: type=1326 audit(1771159833.241:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.291252][ T28] audit: type=1326 audit(1771159833.431:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.551475][ T28] audit: type=1326 audit(1771159833.431:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.620331][ T28] audit: type=1326 audit(1771159833.431:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.642402][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.768652][ T28] audit: type=1326 audit(1771159833.431:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.792380][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.800327][ T28] audit: type=1326 audit(1771159833.431:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.823025][ T28] audit: type=1326 audit(1771159833.431:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 189.845059][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.980396][ T28] audit: type=1326 audit(1771159833.431:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 190.043578][ T28] audit: type=1326 audit(1771159833.431:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 190.330305][ T28] audit: type=1326 audit(1771159833.431:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08a59bf79 code=0x7ffc0000 [ 190.367123][ T6626] netlink: 71 bytes leftover after parsing attributes in process `syz.0.201'. [ 190.746999][ T6634] fuse: Bad value for 'fd' [ 192.068419][ T6649] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 193.860008][ T6673] netlink: 71 bytes leftover after parsing attributes in process `syz.0.214'. [ 194.612045][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.618596][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.339758][ T6685] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 199.095254][ T6707] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 199.128102][ T6709] QAT: Device 119 not found [ 205.626209][ T6743] netlink: 71 bytes leftover after parsing attributes in process `syz.0.234'. [ 206.109761][ T6755] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 208.377655][ T6765] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.043928][ T6785] netlink: 71 bytes leftover after parsing attributes in process `syz.1.248'. [ 212.325782][ T6779] Bluetooth: hci1: command 0x0406 tx timeout [ 212.332155][ T5080] Bluetooth: hci0: command 0x0406 tx timeout [ 212.332965][ T6779] Bluetooth: hci2: command 0x0406 tx timeout [ 212.338247][ T5080] Bluetooth: hci3: command 0x0406 tx timeout [ 212.675785][ T6798] capability: warning: `syz.2.251' uses 32-bit capabilities (legacy support in use) [ 216.839405][ T6825] netlink: 71 bytes leftover after parsing attributes in process `syz.3.258'. [ 216.920712][ T6832] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 220.791890][ T6846] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 223.471788][ T6860] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 224.297493][ T6873] netlink: 71 bytes leftover after parsing attributes in process `syz.0.270'. [ 224.651654][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 224.872813][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 224.903665][ T8] usb 4-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 224.995027][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.046240][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.056562][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.068644][ T8] usb 4-1: Product: syz [ 225.448861][ T8] usb 4-1: Manufacturer: syz [ 225.545008][ T8] usb 4-1: SerialNumber: syz [ 227.402984][ T6893] warning: `syz.0.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.263641][ T8] usb 4-1: 0:2 : does not exist [ 229.531523][ T8] usb 4-1: USB disconnect, device number 2 [ 232.346592][ T6916] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 232.380705][ T6916] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 234.421443][ T6926] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 235.047136][ T6933] netlink: 71 bytes leftover after parsing attributes in process `syz.3.282'. [ 240.284800][ T6962] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 241.610585][ T6965] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 242.270303][ T6973] netlink: 71 bytes leftover after parsing attributes in process `syz.0.299'. [ 243.116574][ T5767] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 245.274812][ T7014] tipc: Started in network mode [ 245.288303][ T7014] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 245.301698][ T7014] tipc: Enabled bearer , priority 10 [ 245.609645][ T7021] netlink: 71 bytes leftover after parsing attributes in process `syz.1.310'. [ 245.984406][ T7034] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 246.488789][ T5836] tipc: Node number set to 1 [ 246.950294][ T7043] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.976303][ T7045] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 250.020134][ C1] sched: RT throttling activated [ 253.714784][ T7096] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 254.242838][ T7100] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 256.167852][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.562965][ T7130] sit1: entered allmulticast mode [ 264.468176][ T7162] hub 8-0:1.0: USB hub found [ 264.474306][ T7162] hub 8-0:1.0: 1 port detected [ 267.220928][ T7187] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 270.399336][ T7231] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 273.941481][ T7255] overlayfs: failed to clone lowerpath [ 274.390228][ T5836] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 274.667458][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32181, setting to 1023 [ 274.718791][ T5836] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 274.744495][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.760136][ T5836] usb 2-1: Product: syz [ 274.764400][ T5836] usb 2-1: Manufacturer: syz [ 274.769057][ T5836] usb 2-1: SerialNumber: syz [ 274.824040][ T5836] usb 2-1: config 0 descriptor?? [ 274.857101][ T5836] hub 2-1:0.0: bad descriptor, ignoring hub [ 274.870292][ T5836] hub: probe of 2-1:0.0 failed with error -5 [ 274.901836][ T5836] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 275.151376][ T7266] binder: 7265:7266 ioctl 4018620d 0 returned -22 [ 275.710909][ T7273] sctp: [Deprecated]: syz.0.366 (pid 7273) Use of int in maxseg socket option. [ 275.710909][ T7273] Use struct sctp_assoc_value instead [ 276.989569][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 277.939114][ T7307] kernel profiling enabled (shift: 63) [ 277.946934][ T7307] profiling shift: 63 too large [ 279.712981][ T7325] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 281.048103][ T5836] usb 2-1: USB disconnect, device number 4 [ 281.550669][ T7366] sctp: [Deprecated]: syz.2.386 (pid 7366) Use of int in maxseg socket option. [ 281.550669][ T7366] Use struct sctp_assoc_value instead [ 281.710260][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 281.910297][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 281.957804][ T787] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.974573][ T787] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.994870][ T787] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.027708][ T787] usb 1-1: config 1 interface 0 has no altsetting 0 [ 282.046347][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 282.059420][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.078294][ T787] usb 1-1: Product: syz [ 282.089392][ T787] usb 1-1: Manufacturer: syz [ 282.101427][ T787] usb 1-1: SerialNumber: syz [ 282.390759][ T787] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 282.424528][ T787] usb 1-1: USB disconnect, device number 4 [ 282.471560][ T787] usblp0: removed [ 282.650946][ T7389] syzkaller0: entered promiscuous mode [ 282.656590][ T7389] syzkaller0: entered allmulticast mode [ 285.340320][ T7420] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 286.106745][ T7425] netlink: 71 bytes leftover after parsing attributes in process `syz.0.398'. [ 286.898676][ T5767] Bluetooth: hci1: Malformed HCI Event [ 288.285311][ T7478] netlink: 71 bytes leftover after parsing attributes in process `syz.3.408'. [ 289.382781][ T7497] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 290.718977][ T7504] netlink: 71 bytes leftover after parsing attributes in process `syz.3.420'. [ 296.986223][ T7604] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 298.218310][ T5775] IPVS: starting estimator thread 0... [ 298.320383][ T7615] IPVS: using max 27 ests per chain, 64800 per kthread [ 299.294954][ T7616] vlan2: entered promiscuous mode [ 299.301947][ T7616] bridge0: entered promiscuous mode [ 299.613558][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 299.641339][ T5775] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 300.090523][ T5775] usb 2-1: Using ep0 maxpacket: 8 [ 300.161929][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.508700][ T5775] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.570528][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.614260][ T5775] usb 2-1: config 0 descriptor?? [ 300.854580][ T5775] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 301.768095][ T7660] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 302.490601][ T5775] usb 2-1: USB disconnect, device number 5 [ 304.850146][ T7692] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 310.357502][ T7745] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 313.378982][ T7780] netlink: 71 bytes leftover after parsing attributes in process `syz.3.474'. [ 315.152797][ T7796] 9pnet_fd: p9_fd_create_tcp (7796): problem connecting socket to 127.0.0.1 [ 315.260835][ T7806] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'. [ 316.060381][ T5775] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 316.270206][ T5775] usb 4-1: Using ep0 maxpacket: 16 [ 316.310759][ T5775] usb 4-1: config 0 has an invalid interface number: 240 but max is 0 [ 316.335940][ T5775] usb 4-1: config 0 has no interface number 0 [ 316.363592][ T5775] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 316.379087][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.398103][ T5775] usb 4-1: Product: syz [ 316.408254][ T5775] usb 4-1: Manufacturer: syz [ 316.418453][ T5775] usb 4-1: SerialNumber: syz [ 316.451002][ T7831] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8) [ 316.472061][ T5775] usb 4-1: config 0 descriptor?? [ 316.528914][ T5775] gspca_main: spca508-2.14.0 probing 041e:4018 [ 316.698572][ T5775] gspca_spca508: reg_read err -32 [ 316.956308][ T5775] gspca_spca508: reg_read err -71 [ 316.991552][ T5775] gspca_spca508: reg_read err -71 [ 317.015057][ T5775] gspca_spca508: reg_read err -71 [ 317.038911][ T5775] gspca_spca508: reg write: error -71 [ 317.064133][ T5775] spca508: probe of 4-1:0.240 failed with error -71 [ 317.103586][ T5775] usb 4-1: USB disconnect, device number 3 [ 317.284361][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.552183][ T7847] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 322.208020][ T7883] xt_TCPMSS: Only works on TCP SYN packets [ 322.287030][ T7883] sit1: entered allmulticast mode [ 322.357763][ T7890] unsupported nla_type 34 [ 322.872451][ T7894] fuse: Bad value for 'fd' [ 326.343453][ C1] ------------[ cut here ]------------ [ 326.349536][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 326.359433][ C1] Modules linked in: [ 326.363466][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 326.370606][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.380819][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 326.387363][ C1] Code: 24 4c 89 e7 e8 3e 42 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 88 84 f7 0f 0b e9 f6 f7 ff ff e8 6d 88 84 f7 <0f> 0b e9 48 fb ff ff e8 61 88 84 f7 48 c7 c7 60 51 64 8e 4c 89 e6 [ 326.407301][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 326.413480][ C1] RAX: ffffffff8a028b33 RBX: ffffffff8a027936 RCX: ffff88801c253c00 [ 326.421582][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.429727][ C1] RBP: 0000000000000000 R08: ffff88801c253c00 R09: 0000000000000003 [ 326.437886][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805dbba3c0 [ 326.445946][ C1] R13: dffffc0000000000 R14: ffff88805dbba8b0 R15: ffff8880267af824 [ 326.454123][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 326.463124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.469901][ C1] CR2: 00007f5073985180 CR3: 000000001cfbc000 CR4: 00000000003506e0 [ 326.477986][ C1] Call Trace: [ 326.481494][ C1] [ 326.484356][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 326.489960][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 326.495464][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 326.502281][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 326.507922][ C1] __iterate_interfaces+0x243/0x500 [ 326.513201][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 326.519533][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 326.526810][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 326.533134][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 326.540407][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 326.545694][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 326.550955][ C1] ? hw_scan_work+0xf60/0xf60 [ 326.555708][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 326.560876][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 326.567003][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 326.572372][ C1] handle_softirqs+0x280/0x820 [ 326.577214][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 326.582145][ C1] ? do_softirq+0x1a0/0x1a0 [ 326.586837][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 326.592117][ C1] __irq_exit_rcu+0xd3/0x190 [ 326.596834][ C1] ? irq_exit_rcu+0x20/0x20 [ 326.601391][ C1] irq_exit_rcu+0x9/0x20 [ 326.605691][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 326.611425][ C1] [ 326.614368][ C1] [ 326.617348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.623394][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 326.629068][ C1] Code: d7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 326.648982][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 326.655227][ C1] RAX: 59c6bbfa0cfc4300 RBX: ffffffff8162a490 RCX: 59c6bbfa0cfc4300 [ 326.663338][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 326.671394][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 326.679397][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff1100384a780 [ 326.687432][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 326.695622][ C1] ? do_idle+0x1f0/0x4e0 [ 326.700029][ C1] default_idle+0x13/0x20 [ 326.704759][ C1] default_idle_call+0x6c/0xa0 [ 326.709571][ C1] do_idle+0x1f0/0x4e0 [ 326.713687][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 326.718918][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 326.725160][ C1] cpu_startup_entry+0x43/0x60 [ 326.729948][ C1] start_secondary+0xee/0xf0 [ 326.734690][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 326.740991][ C1] [ 326.744030][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 326.751324][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 326.758377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.768569][ C1] Call Trace: [ 326.771866][ C1] [ 326.774719][ C1] dump_stack_lvl+0x18c/0x250 [ 326.779426][ C1] ? show_regs_print_info+0x20/0x20 [ 326.784644][ C1] ? load_image+0x400/0x400 [ 326.789169][ C1] panic+0x2dc/0x730 [ 326.793113][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 326.797632][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 326.803897][ C1] __warn+0x2e0/0x470 [ 326.807929][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 326.813759][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 326.819606][ C1] report_bug+0x2be/0x4f0 [ 326.824062][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 326.829828][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 326.835570][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 326.841318][ C1] handle_bug+0xcf/0x120 [ 326.845722][ C1] exc_invalid_op+0x1a/0x50 [ 326.850261][ C1] asm_exc_invalid_op+0x1a/0x20 [ 326.855200][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 326.861564][ C1] Code: 24 4c 89 e7 e8 3e 42 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 88 84 f7 0f 0b e9 f6 f7 ff ff e8 6d 88 84 f7 <0f> 0b e9 48 fb ff ff e8 61 88 84 f7 48 c7 c7 60 51 64 8e 4c 89 e6 [ 326.881217][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 326.887339][ C1] RAX: ffffffff8a028b33 RBX: ffffffff8a027936 RCX: ffff88801c253c00 [ 326.895429][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.903606][ C1] RBP: 0000000000000000 R08: ffff88801c253c00 R09: 0000000000000003 [ 326.911696][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805dbba3c0 [ 326.919690][ C1] R13: dffffc0000000000 R14: ffff88805dbba8b0 R15: ffff8880267af824 [ 326.927696][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 326.933278][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 326.939371][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 326.945114][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 326.950717][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 326.956217][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 326.963023][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 326.968620][ C1] __iterate_interfaces+0x243/0x500 [ 326.973873][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 326.980180][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 326.987500][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 326.993846][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 327.000915][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 327.006159][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 327.011403][ C1] ? hw_scan_work+0xf60/0xf60 [ 327.016107][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 327.021244][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 327.027370][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 327.032524][ C1] handle_softirqs+0x280/0x820 [ 327.037340][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 327.042240][ C1] ? do_softirq+0x1a0/0x1a0 [ 327.046788][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 327.052203][ C1] __irq_exit_rcu+0xd3/0x190 [ 327.056991][ C1] ? irq_exit_rcu+0x20/0x20 [ 327.061555][ C1] irq_exit_rcu+0x9/0x20 [ 327.065906][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 327.071724][ C1] [ 327.074813][ C1] [ 327.077776][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.083892][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 327.089553][ C1] Code: d7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 327.109312][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 327.115748][ C1] RAX: 59c6bbfa0cfc4300 RBX: ffffffff8162a490 RCX: 59c6bbfa0cfc4300 [ 327.124011][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 327.132133][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 327.140355][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff1100384a780 [ 327.148362][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 327.156388][ C1] ? do_idle+0x1f0/0x4e0 [ 327.160669][ C1] default_idle+0x13/0x20 [ 327.165466][ C1] default_idle_call+0x6c/0xa0 [ 327.170266][ C1] do_idle+0x1f0/0x4e0 [ 327.174355][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 327.179652][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 327.185872][ C1] cpu_startup_entry+0x43/0x60 [ 327.190764][ C1] start_secondary+0xee/0xf0 [ 327.195400][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 327.201515][ C1] [ 327.204829][ C1] Kernel Offset: disabled [ 327.209231][ C1] Rebooting in 86400 seconds..