last executing test programs: 3.328382356s ago: executing program 1 (id=2): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x7f, 0x3, 0x2, 0x9, 0x10]}}]}]}]}, 0x38}}, 0x0) 3.197074989s ago: executing program 3 (id=4): timer_create(0x0, &(0x7f0000000200)={0x0, 0x1d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000020601040000eaffffff000000000000"], 0x14}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket(0x2, 0x1, 0x0) r2 = dup(r1) listen(r2, 0x0) accept$unix(r2, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x5}) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x88, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r7 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r7, &(0x7f0000000100)="8a510eb48dbdfcb4", 0x8, 0x9}]) io_getevents(r8, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) io_submit(r8, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x3511, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) getpeername$l2tp(r6, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() 2.989839099s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)={0x60, 0x21, 0x9, {0x9, 0xb, "327889f5f44951"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010004b0400000000fdffffff7a000000", @ANYRES32=0x0, @ANYBLOB="0005000044000000140012800a00010069706f6962000000040002800a000100aaaaaaaade122ddc"], 0x40}}, 0x4) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0xc1105511, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) shutdown(r8, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) 2.64104891s ago: executing program 4 (id=5): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000647f215f4557e01c504e629500080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x82, &(0x7f0000000200), 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_usb_control_io$uac1(r7, 0x0, 0x0) 2.554226883s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x406}, 0x50, &(0x7f0000000700)}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001300)={0x0, @in6={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x7fff}}, 0xb502, 0x3}, &(0x7f00000013c0)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000001400)=0x8) ioctl$int_in(r4, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "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"}}}}}}, 0x1028) socket$netlink(0x10, 0x3, 0xc) 2.308465314s ago: executing program 3 (id=6): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0xffffff14}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x2}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000000c0)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000280)={'syzkaller0\x00', {0x2, 0x4e22, @empty}}) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x59) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001100000024000980"], 0x38}}, 0x0) 2.228130566s ago: executing program 1 (id=7): syz_usb_connect(0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x100010, 0xffffffffffffffff, 0x40000) fanotify_mark(0xffffffffffffffff, 0x94, 0x40000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r5, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r9, @ANYRES16=r8, @ANYRES8=r2, @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad000000"], 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='l', 0x1}], 0x1}, 0x4001) setsockopt$sock_attach_bpf(r11, 0x1, 0x10, &(0x7f0000001280), 0x56) sendmsg$inet(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="d8", 0x1}], 0x1}, 0x0) 0s ago: executing program 2 (id=8): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010014000008000100ac14140008000400", @ANYRES32, @ANYBLOB="100016"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b2000040"]) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') setns(r7, 0x0) rt_sigaction(0xf, &(0x7f0000000180)={&(0x7f0000000100)="42c0c70064400f4b6300400f82000810ff660f29374099c42155599c77306000000f10e80fedb802000000c441fc1140093ef3440f1018", 0x80000001, &(0x7f0000000140)="b6028f494097eed2393a9b0e000100c4c16157bc0c89b10000c4217a128900000000c4c2d145785f26f2abc4c1ddf8f8c190c1000000fa", {[0x8]}}, &(0x7f00000002c0)={&(0x7f00000001c0)="0f9761f4f36745d1520d400f6a2c0766470f18456a43afc481ad597318f20f5e8732233333362e6741dbf366400f55604ec4e16055b107000000", 0x0, &(0x7f0000000200)="263e0ff2eb400f8900000000c4010cc65b6b03410f62a1710000003e6732d140843c36f2450faef4c44273f510c4c3f961b1dc00000000c4c1ffe6ca"}, 0x8, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xb2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 54.788215][ T5848] cgroup: Unknown subsys name 'net' [ 54.913742][ T5848] cgroup: Unknown subsys name 'cpuset' [ 54.921372][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.010644][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.927946][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.935421][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.960951][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.968782][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.978040][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.988479][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.988770][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.002823][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.003902][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.010259][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.024088][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.025201][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.039521][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.046800][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.055147][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.056098][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.062556][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.078723][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.086191][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.091294][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.111619][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.141230][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.148508][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.156356][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.165603][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.432318][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 58.475523][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 58.559692][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 58.584890][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.592637][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.599888][ T5872] bridge_slave_0: entered allmulticast mode [ 58.606903][ T5872] bridge_slave_0: entered promiscuous mode [ 58.626255][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.633562][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.640665][ T5872] bridge_slave_1: entered allmulticast mode [ 58.648496][ T5872] bridge_slave_1: entered promiscuous mode [ 58.676467][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.683636][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.690985][ T5874] bridge_slave_0: entered allmulticast mode [ 58.697889][ T5874] bridge_slave_0: entered promiscuous mode [ 58.722098][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.732640][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 58.742269][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.749357][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.756857][ T5874] bridge_slave_1: entered allmulticast mode [ 58.763522][ T5874] bridge_slave_1: entered promiscuous mode [ 58.777265][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.853604][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.871360][ T5872] team0: Port device team_slave_0 added [ 58.888555][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.897874][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.905331][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.912597][ T5873] bridge_slave_0: entered allmulticast mode [ 58.919038][ T5873] bridge_slave_0: entered promiscuous mode [ 58.926980][ T5872] team0: Port device team_slave_1 added [ 58.949207][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.956746][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.966513][ T5873] bridge_slave_1: entered allmulticast mode [ 58.973156][ T5873] bridge_slave_1: entered promiscuous mode [ 59.000513][ T5874] team0: Port device team_slave_0 added [ 59.024754][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 59.034110][ T5874] team0: Port device team_slave_1 added [ 59.049000][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.056211][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.082354][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.110575][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.120183][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.127323][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.153718][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.167544][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.174762][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.182211][ T5877] bridge_slave_0: entered allmulticast mode [ 59.188735][ T5877] bridge_slave_0: entered promiscuous mode [ 59.200305][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.207743][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.215012][ T5877] bridge_slave_1: entered allmulticast mode [ 59.221583][ T5877] bridge_slave_1: entered promiscuous mode [ 59.235713][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.275362][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.282402][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.309168][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.322192][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.329145][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.355494][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.369586][ T5873] team0: Port device team_slave_0 added [ 59.377484][ T5873] team0: Port device team_slave_1 added [ 59.414844][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.425546][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.475878][ T5872] hsr_slave_0: entered promiscuous mode [ 59.482453][ T5872] hsr_slave_1: entered promiscuous mode [ 59.488861][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.495957][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.522187][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.554274][ T5877] team0: Port device team_slave_0 added [ 59.562293][ T5877] team0: Port device team_slave_1 added [ 59.568502][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.575672][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.602156][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.613024][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.620162][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.627689][ T5878] bridge_slave_0: entered allmulticast mode [ 59.634331][ T5878] bridge_slave_0: entered promiscuous mode [ 59.641989][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.649119][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.656405][ T5878] bridge_slave_1: entered allmulticast mode [ 59.662996][ T5878] bridge_slave_1: entered promiscuous mode [ 59.672264][ T5874] hsr_slave_0: entered promiscuous mode [ 59.678275][ T5874] hsr_slave_1: entered promiscuous mode [ 59.684713][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 59.690458][ T5874] Cannot create hsr debugfs directory [ 59.714590][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.721806][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.747892][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.789465][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.796594][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.822724][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.839256][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.850864][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.932922][ T5878] team0: Port device team_slave_0 added [ 59.945633][ T5873] hsr_slave_0: entered promiscuous mode [ 59.952752][ T5873] hsr_slave_1: entered promiscuous mode [ 59.958717][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 59.964593][ T5873] Cannot create hsr debugfs directory [ 59.976201][ T5877] hsr_slave_0: entered promiscuous mode [ 59.982316][ T5877] hsr_slave_1: entered promiscuous mode [ 59.988205][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 59.993982][ T5877] Cannot create hsr debugfs directory [ 60.004401][ T5878] team0: Port device team_slave_1 added [ 60.078861][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.086198][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.112279][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.122797][ T5871] Bluetooth: hci0: command tx timeout [ 60.124000][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.135307][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.161248][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.190971][ T5859] Bluetooth: hci4: command tx timeout [ 60.190989][ T5863] Bluetooth: hci2: command tx timeout [ 60.196426][ T5871] Bluetooth: hci3: command tx timeout [ 60.201860][ T51] Bluetooth: hci1: command tx timeout [ 60.267413][ T5878] hsr_slave_0: entered promiscuous mode [ 60.273583][ T5878] hsr_slave_1: entered promiscuous mode [ 60.279416][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 60.285567][ T5878] Cannot create hsr debugfs directory [ 60.372933][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.382465][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.401230][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.409851][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.480967][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.499797][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.509632][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.518860][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.563533][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.583876][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.594323][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.608012][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.638676][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.649758][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.673682][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.688365][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.725165][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.734778][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.745484][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.754320][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.784348][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.821672][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.845684][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.868971][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.893094][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.900202][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.908950][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.916083][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.926157][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.933277][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.965607][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.972759][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.012552][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.032478][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.069516][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.085752][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.093957][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.101092][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.129271][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.136615][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.146816][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.153997][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.174030][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.193067][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.202336][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.209436][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.233559][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.253763][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.260928][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.282796][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.289924][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.313748][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.394926][ T5872] veth0_vlan: entered promiscuous mode [ 61.409780][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.428961][ T5874] veth0_vlan: entered promiscuous mode [ 61.437105][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.446320][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.455728][ T5872] veth1_vlan: entered promiscuous mode [ 61.478792][ T5874] veth1_vlan: entered promiscuous mode [ 61.529222][ T5878] veth0_vlan: entered promiscuous mode [ 61.555044][ T5872] veth0_macvtap: entered promiscuous mode [ 61.564795][ T5878] veth1_vlan: entered promiscuous mode [ 61.572573][ T5874] veth0_macvtap: entered promiscuous mode [ 61.590261][ T5877] veth0_vlan: entered promiscuous mode [ 61.597066][ T5873] veth0_vlan: entered promiscuous mode [ 61.608241][ T5874] veth1_macvtap: entered promiscuous mode [ 61.621576][ T5872] veth1_macvtap: entered promiscuous mode [ 61.635446][ T5873] veth1_vlan: entered promiscuous mode [ 61.644351][ T5877] veth1_vlan: entered promiscuous mode [ 61.656635][ T5878] veth0_macvtap: entered promiscuous mode [ 61.676566][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.686880][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.698763][ T5878] veth1_macvtap: entered promiscuous mode [ 61.709266][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.719380][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.738056][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.747216][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.770331][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.782404][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.797366][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.807502][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.824926][ T5877] veth0_macvtap: entered promiscuous mode [ 61.836188][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.845216][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.857021][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.868395][ T5877] veth1_macvtap: entered promiscuous mode [ 61.878076][ T5873] veth0_macvtap: entered promiscuous mode [ 61.887064][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.922428][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.930639][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.946236][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.965442][ T5873] veth1_macvtap: entered promiscuous mode [ 61.979917][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.990283][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.018514][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.026121][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.027703][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.035893][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.048606][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.065240][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.072965][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.075561][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.088614][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.141873][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.153368][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.175903][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.184132][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.193141][ T51] Bluetooth: hci0: command tx timeout [ 62.203477][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.214615][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.251830][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.253513][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.268538][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.271569][ T51] Bluetooth: hci1: command tx timeout [ 62.280139][ T5871] Bluetooth: hci2: command tx timeout [ 62.281327][ T5863] Bluetooth: hci3: command tx timeout [ 62.286846][ T5871] Bluetooth: hci4: command tx timeout [ 62.293860][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.320198][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.368518][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.394974][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.406013][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.429365][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.452342][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.460943][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.555786][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.577002][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.589310][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.610239][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.649030][ T5950] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 62.851581][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.873338][ T5955] Zero length message leads to an empty skb [ 62.895059][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.914518][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.001190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.010604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.031929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.071112][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 63.077904][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.089832][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.099907][ T55] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.204855][ T5964] netlink: 'syz.4.5': attribute type 27 has an invalid length. [ 63.305085][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.312520][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.533340][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.600799][ T5943] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.641571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.666004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.681967][ T5979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 63.719425][ T5978] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 63.728380][ T55] usb 1-1: config 0 descriptor?? [ 63.788434][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.820850][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 63.827219][ T55] hub 1-1:0.0: USB hub found [ 63.837655][ T5943] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.846759][ T5943] usb 5-1: config 0 has no interface number 0 [ 63.865111][ T5943] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 63.900770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.036032][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6'. [ 64.063542][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.071120][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.086529][ T55] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 64.260900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.269423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.277986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.279704][ T5871] Bluetooth: hci0: command tx timeout [ 64.286920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 64.374859][ T5871] Bluetooth: hci3: command tx timeout [ 64.375851][ T5859] Bluetooth: hci4: command tx timeout [ 64.381492][ T5871] Bluetooth: hci1: command tx timeout [ 64.387550][ T5863] Bluetooth: hci2: command tx timeout [ 64.769751][ T5985] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 64.857183][ T5943] usb 5-1: Product: syz [ 64.865357][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.876620][ T5943] usb 5-1: Manufacturer: syz [ 64.885364][ T5943] usb 5-1: SerialNumber: syz [ 64.896661][ T5943] usb 5-1: config 0 descriptor?? [ 64.986085][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.001598][ T5943] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 65.072648][ T5967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.348407][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.362356][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.425412][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.452550][ T5978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.473957][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.484788][ T5978] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 65.579789][ T5978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.587728][ T5978] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 65.599157][ T5978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.607986][ T5978] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 65.619159][ T5978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 65.626542][ T5978] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 65.852612][ T5978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.858782][ T5978] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 66.023295][ T5978] ------------[ cut here ]------------ [ 66.028783][ T5978] WARNING: CPU: 1 PID: 5978 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 66.037734][ T5978] Modules linked in: [ 66.041631][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 66.050647][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.060700][ T5978] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 66.066519][ T5978] Code: ff 4c 89 ff be 03 00 00 00 e8 f2 3c 08 03 e9 eb fa ff ff e8 48 de b9 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 2e f7 b9 09 89 c0 48 c7 c7 08 d7 a0 92 48 03 3c c5 10 [ 66.086144][ T5978] RSP: 0000:ffffc900046cf270 EFLAGS: 00010002 [ 66.092209][ T5978] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 66.100180][ T5978] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 66.108263][ T5978] RBP: ffffc900046cf4d0 R08: 0000000000000001 R09: 0000000000000000 [ 66.116233][ T5978] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffff8880b8728708 [ 66.124215][ T5978] R13: ffffffff81bfb527 R14: ffff88802b72bc00 R15: 0000000000000000 [ 66.132192][ T5978] FS: 00007fa6995916c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 66.141195][ T5978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.147792][ T5978] CR2: 00007f0df1628020 CR3: 00000000760e6000 CR4: 00000000003526f0 [ 66.155782][ T5978] Call Trace: [ 66.159060][ T5978] [ 66.161980][ T5978] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 66.167437][ T5978] ieee80211_rx_list+0x52c/0x2a90 [ 66.172454][ T5978] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 66.178619][ T5978] ? do_raw_spin_lock+0x121/0x290 [ 66.183723][ T5978] ? lock_acquire+0x5f/0x360 [ 66.188372][ T5978] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 66.193846][ T5978] ? lock_release+0x4b/0x3e0 [ 66.198453][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.203242][ T5978] ? ieee80211_rx_napi+0xca/0x3d0 [ 66.208268][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.213113][ T5978] ? lock_acquire+0x5f/0x360 [ 66.217850][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.222630][ T5978] ? ieee80211_rx_napi+0xca/0x3d0 [ 66.227659][ T5978] ieee80211_rx_napi+0x1a8/0x3d0 [ 66.232628][ T5978] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 66.238096][ T5978] ? skb_dequeue+0x10e/0x150 [ 66.242706][ T5978] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 66.248704][ T5978] ? ieee80211_stop_device+0x29/0xf0 [ 66.253984][ T5978] ieee80211_stop_device+0x3e/0xf0 [ 66.259101][ T5978] ieee80211_do_stop+0x17e7/0x1fb0 [ 66.264212][ T5978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.269594][ T5978] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 66.275061][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.279816][ T5978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 66.286144][ T5978] ? wiphy_work_cancel+0x1eb/0x3c0 [ 66.291270][ T5978] ieee80211_stop+0x1b1/0x240 [ 66.295950][ T5978] ? __pfx_ieee80211_stop+0x10/0x10 [ 66.301173][ T5978] __dev_close_many+0x364/0x6f0 [ 66.306094][ T5978] ? __pfx___dev_close_many+0x10/0x10 [ 66.311585][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.316375][ T5978] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 66.322288][ T5978] netif_close_many+0x225/0x410 [ 66.327154][ T5978] ? __pfx_netif_close_many+0x10/0x10 [ 66.332529][ T5978] ? __mutex_lock+0xd3b/0x1350 [ 66.337333][ T5978] ? __mutex_lock+0x5bb/0x1350 [ 66.342200][ T5978] netif_close+0x158/0x210 [ 66.346635][ T5978] ? __pfx_netif_close+0x10/0x10 [ 66.351617][ T5978] ? __pfx___mutex_lock+0x10/0x10 [ 66.356653][ T5978] dev_close+0x10a/0x220 [ 66.360900][ T5978] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 66.367066][ T5978] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 66.373238][ T5978] cfg80211_rfkill_set_block+0x2d/0x50 [ 66.378694][ T5978] rfkill_set_block+0x1cf/0x440 [ 66.383541][ T5978] rfkill_fop_write+0x44b/0x570 [ 66.388448][ T5978] ? __pfx_rfkill_fop_write+0x10/0x10 [ 66.393843][ T5978] ? __pfx_security_file_permission+0x10/0x10 [ 66.399932][ T5978] ? rw_verify_area+0x255/0x4d0 [ 66.404794][ T5978] ? __pfx_rfkill_fop_write+0x10/0x10 [ 66.410168][ T5978] vfs_write+0x27e/0xb30 [ 66.414420][ T5978] ? __pfx_vfs_write+0x10/0x10 [ 66.419202][ T5978] ? lock_release+0x4b/0x3e0 [ 66.423802][ T5978] ? __fget_files+0x2a/0x420 [ 66.428396][ T5978] ? __fget_files+0x3a0/0x420 [ 66.433112][ T5978] ? __fget_files+0x2a/0x420 [ 66.437695][ T5978] ksys_write+0x145/0x250 [ 66.442023][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 66.446860][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.451622][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.456371][ T5978] do_syscall_64+0xfa/0x3b0 [ 66.460953][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.467009][ T5978] ? clear_bhb_loop+0x60/0xb0 [ 66.471685][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.477557][ T5978] RIP: 0033:0x7fa69b78ebe9 [ 66.481982][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.501576][ T5978] RSP: 002b:00007fa699591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.510000][ T5978] RAX: ffffffffffffffda RBX: 00007fa69b9b6270 RCX: 00007fa69b78ebe9 [ 66.517965][ T5978] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.525968][ T5978] RBP: 00007fa69b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 66.533954][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.541942][ T5978] R13: 00007fa69b9b6308 R14: 00007fa69b9b6270 R15: 00007fa69badfa28 [ 66.549916][ T5978] [ 66.552937][ T5978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.560220][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 66.569243][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.579303][ T5978] Call Trace: [ 66.582588][ T5978] [ 66.585520][ T5978] dump_stack_lvl+0x99/0x250 [ 66.590121][ T5978] ? __asan_memcpy+0x40/0x70 [ 66.594705][ T5978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.599909][ T5978] ? __pfx__printk+0x10/0x10 [ 66.604492][ T5978] vpanic+0x281/0x750 [ 66.608480][ T5978] ? __pfx__printk+0x10/0x10 [ 66.613067][ T5978] ? __pfx_vpanic+0x10/0x10 [ 66.617557][ T5978] ? is_bpf_text_address+0x292/0x2b0 [ 66.622831][ T5978] panic+0xb9/0xc0 [ 66.626541][ T5978] ? __pfx_panic+0x10/0x10 [ 66.630967][ T5978] __warn+0x31b/0x4b0 [ 66.635019][ T5978] ? kcov_remote_start+0x55a/0x7f0 [ 66.640137][ T5978] ? kcov_remote_start+0x55a/0x7f0 [ 66.645282][ T5978] report_bug+0x2be/0x4f0 [ 66.649635][ T5978] ? kcov_remote_start+0x55a/0x7f0 [ 66.654755][ T5978] ? kcov_remote_start+0x55a/0x7f0 [ 66.659870][ T5978] ? kcov_remote_start+0x55c/0x7f0 [ 66.665007][ T5978] handle_bug+0x84/0x160 [ 66.669277][ T5978] exc_invalid_op+0x1a/0x50 [ 66.673850][ T5978] asm_exc_invalid_op+0x1a/0x20 [ 66.678802][ T5978] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 66.684549][ T5978] Code: ff 4c 89 ff be 03 00 00 00 e8 f2 3c 08 03 e9 eb fa ff ff e8 48 de b9 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 2e f7 b9 09 89 c0 48 c7 c7 08 d7 a0 92 48 03 3c c5 10 [ 66.704168][ T5978] RSP: 0000:ffffc900046cf270 EFLAGS: 00010002 [ 66.710260][ T5978] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 66.718223][ T5978] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 66.726193][ T5978] RBP: ffffc900046cf4d0 R08: 0000000000000001 R09: 0000000000000000 [ 66.734155][ T5978] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffff8880b8728708 [ 66.742126][ T5978] R13: ffffffff81bfb527 R14: ffff88802b72bc00 R15: 0000000000000000 [ 66.750109][ T5978] ? kcov_remote_start+0x97/0x7f0 [ 66.755150][ T5978] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 66.760617][ T5978] ieee80211_rx_list+0x52c/0x2a90 [ 66.765658][ T5978] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 66.771829][ T5978] ? do_raw_spin_lock+0x121/0x290 [ 66.776852][ T5978] ? lock_acquire+0x5f/0x360 [ 66.781450][ T5978] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 66.786928][ T5978] ? lock_release+0x4b/0x3e0 [ 66.791542][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.796327][ T5978] ? ieee80211_rx_napi+0xca/0x3d0 [ 66.801413][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.806180][ T5978] ? lock_acquire+0x5f/0x360 [ 66.810795][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.815576][ T5978] ? ieee80211_rx_napi+0xca/0x3d0 [ 66.820610][ T5978] ieee80211_rx_napi+0x1a8/0x3d0 [ 66.825611][ T5978] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 66.831096][ T5978] ? skb_dequeue+0x10e/0x150 [ 66.835808][ T5978] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 66.841812][ T5978] ? ieee80211_stop_device+0x29/0xf0 [ 66.847211][ T5978] ieee80211_stop_device+0x3e/0xf0 [ 66.852327][ T5978] ieee80211_do_stop+0x17e7/0x1fb0 [ 66.857456][ T5978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.862850][ T5978] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 66.868422][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.873233][ T5978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 66.879569][ T5978] ? wiphy_work_cancel+0x1eb/0x3c0 [ 66.884684][ T5978] ieee80211_stop+0x1b1/0x240 [ 66.889360][ T5978] ? __pfx_ieee80211_stop+0x10/0x10 [ 66.894581][ T5978] __dev_close_many+0x364/0x6f0 [ 66.899550][ T5978] ? __pfx___dev_close_many+0x10/0x10 [ 66.904935][ T5978] ? rcu_is_watching+0x15/0xb0 [ 66.909707][ T5978] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 66.916184][ T5978] netif_close_many+0x225/0x410 [ 66.921144][ T5978] ? __pfx_netif_close_many+0x10/0x10 [ 66.926544][ T5978] ? __mutex_lock+0xd3b/0x1350 [ 66.931354][ T5978] ? __mutex_lock+0x5bb/0x1350 [ 66.936137][ T5978] netif_close+0x158/0x210 [ 66.940585][ T5978] ? __pfx_netif_close+0x10/0x10 [ 66.945535][ T5978] ? __pfx___mutex_lock+0x10/0x10 [ 66.950583][ T5978] dev_close+0x10a/0x220 [ 66.954826][ T5978] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 66.961000][ T5978] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 66.967161][ T5978] cfg80211_rfkill_set_block+0x2d/0x50 [ 66.972651][ T5978] rfkill_set_block+0x1cf/0x440 [ 66.977512][ T5978] rfkill_fop_write+0x44b/0x570 [ 66.982354][ T5978] ? __pfx_rfkill_fop_write+0x10/0x10 [ 66.987759][ T5978] ? __pfx_security_file_permission+0x10/0x10 [ 66.993839][ T5978] ? rw_verify_area+0x255/0x4d0 [ 66.998696][ T5978] ? __pfx_rfkill_fop_write+0x10/0x10 [ 67.004092][ T5978] vfs_write+0x27e/0xb30 [ 67.008341][ T5978] ? __pfx_vfs_write+0x10/0x10 [ 67.013109][ T5978] ? lock_release+0x4b/0x3e0 [ 67.017712][ T5978] ? __fget_files+0x2a/0x420 [ 67.022323][ T5978] ? __fget_files+0x3a0/0x420 [ 67.027082][ T5978] ? __fget_files+0x2a/0x420 [ 67.031679][ T5978] ksys_write+0x145/0x250 [ 67.036016][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 67.040869][ T5978] ? rcu_is_watching+0x15/0xb0 [ 67.045679][ T5978] ? rcu_is_watching+0x15/0xb0 [ 67.050450][ T5978] do_syscall_64+0xfa/0x3b0 [ 67.054972][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.061036][ T5978] ? clear_bhb_loop+0x60/0xb0 [ 67.065722][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.071618][ T5978] RIP: 0033:0x7fa69b78ebe9 [ 67.076039][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.095640][ T5978] RSP: 002b:00007fa699591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.104061][ T5978] RAX: ffffffffffffffda RBX: 00007fa69b9b6270 RCX: 00007fa69b78ebe9 [ 67.112024][ T5978] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 67.119995][ T5978] RBP: 00007fa69b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.128052][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.136016][ T5978] R13: 00007fa69b9b6308 R14: 00007fa69b9b6270 R15: 00007fa69badfa28 [ 67.144090][ T5978] [ 67.147461][ T5978] Kernel Offset: disabled [ 67.151801][ T5978] Rebooting in 86400 seconds..