last executing test programs: 9.450300789s ago: executing program 3 (id=139): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0xc) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x4, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e28, @remote}, 0x0, 0x4, 0x0, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x4000000008}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}, 0x400c845) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x2c}}, 0x40080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r2, r2, 0x2) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) syz_io_uring_setup(0x2057, &(0x7f0000000340)={0x0, 0x24, 0x20, 0x1, 0xffffffff, 0x0, r4}, &(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) 6.632633517s ago: executing program 2 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r3, 0x1, 0x0) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000fd3f000018110000", @ANYRES32=r4, @ANYBLOB="b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800b95d65846c037413b8340000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(r7) 4.968412318s ago: executing program 3 (id=161): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 4.445347281s ago: executing program 3 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}}, 0x0) 4.208869627s ago: executing program 0 (id=166): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r0, 0x0, 0x0, 0x8c, 0xfffffffd) 4.127942719s ago: executing program 3 (id=167): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x964, 0x89f8}, 0x8) 4.09205603s ago: executing program 2 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.008841772s ago: executing program 0 (id=169): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x568, &(0x7f0000000140)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.988053402s ago: executing program 3 (id=170): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x10000}}, 0xa) 3.835982416s ago: executing program 0 (id=171): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_open_dev$ptys(0xc, 0x3, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socket$inet6_icmp(0xa, 0x2, 0x3a) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0xa) 3.564818232s ago: executing program 2 (id=172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc082}, 0x20004084) 2.502903018s ago: executing program 0 (id=173): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r1, 0x4b4b, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.44472005s ago: executing program 2 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=@sha1={0x1, "1bda553099b0dadcd0b4da8e92f19e292c8f6360"}, 0x15, 0x2) r0 = getpid() bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x3ffffffc, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x5, 0x0, 0x0, 0x4000000, 0x5, 0x4829e, 0x7, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x80000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x800c, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x10003, 0x4, 0xfdfffffffffffffe, 0xdd0, 0x0, 0xfffffffffffffffe, 0x400000000000000, 0x1, 0x5d78, 0x2, 0x80000001, 0x80000000, 0xc20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xc, 0x9, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x4, 0x40000000001075, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x2, 0x7, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4, 0x7]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x8, 0x5, {r0}, {r3}, 0x8, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) 1.341445117s ago: executing program 1 (id=175): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xb8) 1.23049219s ago: executing program 2 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 1.091912183s ago: executing program 1 (id=177): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r0, 0x0, 0x0, 0x8c, 0xfffffffd) 828.646049ms ago: executing program 1 (id=178): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x964, 0x89f8}, 0x8) 649.812584ms ago: executing program 1 (id=179): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1262) 597.229056ms ago: executing program 2 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 364.767531ms ago: executing program 1 (id=181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="05000000", 0x4) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000300)="120000001c0000010011223344556600000101", 0x13) write(r0, &(0x7f0000000400)="1b00000008001122334455660000", 0xe) 342.356571ms ago: executing program 3 (id=182): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socket$inet6_icmp(0xa, 0x2, 0x3a) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x10000}}, 0xa) 336.386402ms ago: executing program 0 (id=183): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0xed, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfff, 0x1, 0x4, 0x0, 0xf9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x1, {0x1, @win={{0x0, 0xfff}, 0x0, 0x3, 0x0, 0x0, 0x0}}}) 116.74µs ago: executing program 1 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=@sha1={0x1, "1bda553099b0dadcd0b4da8e92f19e292c8f6360"}, 0x15, 0x2) r0 = getpid() bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x3ffffffc, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x5, 0x0, 0x0, 0x4000000, 0x5, 0x4829e, 0x7, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x80000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x800c, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x10003, 0x4, 0xfdfffffffffffffe, 0xdd0, 0x0, 0xfffffffffffffffe, 0x400000000000000, 0x1, 0x5d78, 0x2, 0x80000001, 0x80000000, 0xc20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xc, 0x9, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x4, 0x40000000001075, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x2, 0x7, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4, 0x7]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x8, 0x5, {r0}, {r3}, 0x8, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) 0s ago: executing program 0 (id=185): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xb8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. syzkaller login: [ 83.178381][ T5765] cgroup: Unknown subsys name 'net' [ 83.320907][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.036701][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.710053][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.718815][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.732063][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.740204][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.747997][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.755427][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.786778][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.797524][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.805706][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.814801][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.838209][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.845666][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.916056][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.932156][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.951924][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.971963][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.982204][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.989898][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.022804][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.032573][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.041877][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.050467][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.058718][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.072272][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.518188][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.694518][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.802226][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.810233][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.818549][ T5776] bridge_slave_0: entered allmulticast mode [ 87.827195][ T5776] bridge_slave_0: entered promiscuous mode [ 87.837607][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.846115][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.854464][ T5776] bridge_slave_1: entered allmulticast mode [ 87.861545][ T5776] bridge_slave_1: entered promiscuous mode [ 87.869110][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.948346][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.957737][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.967869][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.975191][ T5781] bridge_slave_0: entered allmulticast mode [ 87.982584][ T5781] bridge_slave_0: entered promiscuous mode [ 87.998384][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.012649][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.033561][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.040850][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.048272][ T5781] bridge_slave_1: entered allmulticast mode [ 88.055327][ T5781] bridge_slave_1: entered promiscuous mode [ 88.140347][ T5776] team0: Port device team_slave_0 added [ 88.149177][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.165354][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.197691][ T5776] team0: Port device team_slave_1 added [ 88.295319][ T5781] team0: Port device team_slave_0 added [ 88.303407][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.310380][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.336754][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.351086][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.358185][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.384275][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.395856][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.403365][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.410616][ T5786] bridge_slave_0: entered allmulticast mode [ 88.418067][ T5786] bridge_slave_0: entered promiscuous mode [ 88.440630][ T5781] team0: Port device team_slave_1 added [ 88.456733][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.465626][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.472917][ T5786] bridge_slave_1: entered allmulticast mode [ 88.479985][ T5786] bridge_slave_1: entered promiscuous mode [ 88.497390][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.504855][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.512868][ T5788] bridge_slave_0: entered allmulticast mode [ 88.520335][ T5788] bridge_slave_0: entered promiscuous mode [ 88.538355][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.545938][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.553228][ T5788] bridge_slave_1: entered allmulticast mode [ 88.560242][ T5788] bridge_slave_1: entered promiscuous mode [ 88.629762][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.642486][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.653462][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.660457][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.686486][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.717452][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.730422][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.751199][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.759307][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.786001][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.803753][ T5776] hsr_slave_0: entered promiscuous mode [ 88.810478][ T5776] hsr_slave_1: entered promiscuous mode [ 88.861471][ T5786] team0: Port device team_slave_0 added [ 88.871013][ T5786] team0: Port device team_slave_1 added [ 88.876952][ T5780] Bluetooth: hci0: command tx timeout [ 88.888270][ T5788] team0: Port device team_slave_0 added [ 88.898174][ T5788] team0: Port device team_slave_1 added [ 88.942303][ T5780] Bluetooth: hci1: command tx timeout [ 88.977143][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.984519][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.010885][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.022206][ T5780] Bluetooth: hci2: command tx timeout [ 89.029859][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.036937][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.062903][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.081342][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.088647][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.115324][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.157955][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.168099][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.194173][ T5780] Bluetooth: hci3: command tx timeout [ 89.199894][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.217668][ T5781] hsr_slave_0: entered promiscuous mode [ 89.224100][ T5781] hsr_slave_1: entered promiscuous mode [ 89.230275][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.238230][ T5781] Cannot create hsr debugfs directory [ 89.301997][ T5788] hsr_slave_0: entered promiscuous mode [ 89.308605][ T5788] hsr_slave_1: entered promiscuous mode [ 89.315090][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.322813][ T5788] Cannot create hsr debugfs directory [ 89.433409][ T5786] hsr_slave_0: entered promiscuous mode [ 89.440045][ T5786] hsr_slave_1: entered promiscuous mode [ 89.447156][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.454851][ T5786] Cannot create hsr debugfs directory [ 89.798665][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.818012][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.843309][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.855183][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.923959][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.937888][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.949529][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.982163][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.050298][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.061669][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.090683][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.101429][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.169769][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.184895][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.202166][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.214572][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.354702][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.391352][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.428614][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.460590][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.482262][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.489924][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.505272][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.535476][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.542713][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.566173][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.573431][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.585436][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.592630][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.608607][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.636497][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.643714][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.675740][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.682979][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.716821][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.818360][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.899902][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.907187][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.942203][ T5780] Bluetooth: hci0: command tx timeout [ 90.989014][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.996226][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.023893][ T5780] Bluetooth: hci1: command tx timeout [ 91.103328][ T5780] Bluetooth: hci2: command tx timeout [ 91.262695][ T5780] Bluetooth: hci3: command tx timeout [ 91.399884][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.434592][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.551038][ T5776] veth0_vlan: entered promiscuous mode [ 91.646371][ T5776] veth1_vlan: entered promiscuous mode [ 91.671223][ T5781] veth0_vlan: entered promiscuous mode [ 91.706941][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.729521][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.741477][ T5781] veth1_vlan: entered promiscuous mode [ 91.805180][ T5776] veth0_macvtap: entered promiscuous mode [ 91.840061][ T5776] veth1_macvtap: entered promiscuous mode [ 91.884217][ T5786] veth0_vlan: entered promiscuous mode [ 91.909535][ T5781] veth0_macvtap: entered promiscuous mode [ 91.926404][ T5786] veth1_vlan: entered promiscuous mode [ 91.939426][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.970302][ T5781] veth1_macvtap: entered promiscuous mode [ 91.986675][ T5788] veth0_vlan: entered promiscuous mode [ 91.997222][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.019098][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.030609][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.042977][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.066825][ T8] cfg80211: failed to load regulatory.db [ 92.076197][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086675][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096106][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105780][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121241][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.133836][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.145961][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.158080][ T5788] veth1_vlan: entered promiscuous mode [ 92.206277][ T5786] veth0_macvtap: entered promiscuous mode [ 92.217665][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.227779][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237954][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.246878][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.267648][ T5786] veth1_macvtap: entered promiscuous mode [ 92.318774][ T5788] veth0_macvtap: entered promiscuous mode [ 92.371414][ T5788] veth1_macvtap: entered promiscuous mode [ 92.392186][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.405613][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.416407][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.427201][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.439879][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.511010][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.523016][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.533138][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.544889][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.557413][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.569914][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.584310][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.595499][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.606144][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.616506][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.628449][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.648753][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.658157][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.670706][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.681448][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.689947][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.706673][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.717445][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.727697][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.740818][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.755992][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.784691][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.795622][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.804777][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.818429][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.827227][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.837142][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850722][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.859926][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.878114][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886960][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.970375][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.970718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.980271][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.015640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.032734][ T5780] Bluetooth: hci0: command tx timeout [ 93.102527][ T5780] Bluetooth: hci1: command tx timeout [ 93.170357][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.182302][ T5780] Bluetooth: hci2: command tx timeout [ 93.190005][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.190023][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.215071][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.300894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.340632][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.352268][ T5780] Bluetooth: hci3: command tx timeout [ 93.475708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.502705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.821020][ T5856] syz.3.4[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.872452][ T5856] loop3: detected capacity change from 0 to 164 [ 94.695326][ T5881] can0: slcan on ttyS3. [ 94.823394][ T5888] ======================================================= [ 94.823394][ T5888] WARNING: The mand mount option has been deprecated and [ 94.823394][ T5888] and is ignored by this kernel. Remove the mand [ 94.823394][ T5888] option from the mount to silence this warning. [ 94.823394][ T5888] ======================================================= [ 94.906441][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 94.953101][ T5881] can0 (unregistered): slcan off ttyS3. [ 95.113886][ T5780] Bluetooth: hci0: command tx timeout [ 95.182443][ T5780] Bluetooth: hci1: command tx timeout [ 95.262064][ T5780] Bluetooth: hci2: command tx timeout [ 95.449832][ T5780] Bluetooth: hci3: command tx timeout [ 95.473882][ T5894] loop2: detected capacity change from 0 to 64 [ 95.814749][ T5891] db_root: cannot open: /dev/sequencer2 [ 95.820995][ T5891] db_root: not a directory: /dev/sequencer2 [ 95.889015][ T28] audit: type=1800 audit(1791237622.543:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 96.410387][ T5915] 9pnet_virtio: no channels available for device syz [ 96.637295][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.786719][ T5925] bridge_slave_0 (unregistering): left allmulticast mode [ 96.806451][ T5925] bridge_slave_0 (unregistering): left promiscuous mode [ 96.829622][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.055684][ T5937] capability: warning: `syz.1.32' uses deprecated v2 capabilities in a way that may be insecure [ 97.067102][ T5937] FAULT_INJECTION: forcing a failure. [ 97.067102][ T5937] name fail_futex, interval 1, probability 0, space 0, times 1 [ 97.080524][ T5937] CPU: 1 PID: 5937 Comm: syz.1.32 Not tainted syzkaller #0 [ 97.087794][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.097927][ T5937] Call Trace: [ 97.101255][ T5937] [ 97.104232][ T5937] dump_stack_lvl+0x18c/0x250 [ 97.108975][ T5937] ? show_regs_print_info+0x20/0x20 [ 97.114239][ T5937] ? load_image+0x420/0x420 [ 97.118810][ T5937] ? stack_trace_save+0xaa/0x100 [ 97.123804][ T5937] ? stack_trace_snprint+0xf0/0xf0 [ 97.128988][ T5937] should_fail_ex+0x394/0x4c0 [ 97.133736][ T5937] get_futex_key+0x136/0x1030 [ 97.138491][ T5937] ? kasan_set_track+0x4e/0x70 [ 97.143302][ T5937] ? kasan_save_free_info+0x28/0x40 [ 97.148555][ T5937] ? ____kasan_slab_free+0x126/0x1f0 [ 97.153888][ T5937] ? kmem_cache_free+0xf8/0x290 [ 97.158782][ T5937] ? do_syscall_64+0x55/0xb0 [ 97.163421][ T5937] ? futex_setup_timer+0xc0/0xc0 [ 97.168390][ T5937] futex_wake+0x127/0x4f0 [ 97.172751][ T5937] ? futex_wake_mark+0x150/0x150 [ 97.177713][ T5937] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 97.183722][ T5937] ? lock_chain_count+0x20/0x20 [ 97.188610][ T5937] do_futex+0x35d/0x3e0 [ 97.192806][ T5937] ? __ia32_sys_get_robust_list+0x110/0x110 [ 97.198731][ T5937] ? slab_free_freelist_hook+0x130/0x1a0 [ 97.204401][ T5937] __se_sys_futex+0x3a9/0x440 [ 97.209106][ T5937] ? __x64_sys_futex+0xf0/0xf0 [ 97.213904][ T5937] ? __x64_sys_futex+0x21/0xf0 [ 97.218701][ T5937] do_syscall_64+0x55/0xb0 [ 97.223158][ T5937] ? clear_bhb_loop+0x40/0x90 [ 97.227866][ T5937] ? clear_bhb_loop+0x40/0x90 [ 97.232577][ T5937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.238507][ T5937] RIP: 0033:0x7f045799e199 [ 97.242956][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.262601][ T5937] RSP: 002b:00007f04588930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.271087][ T5937] RAX: ffffffffffffffda RBX: 00007f0457c25fa8 RCX: 00007f045799e199 [ 97.279108][ T5937] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0457c25fac [ 97.287115][ T5937] RBP: 00007f0457c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 97.295139][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.303136][ T5937] R13: 00007f0457c26038 R14: 00007ffebca5f850 R15: 00007ffebca5f938 [ 97.311141][ T5937] [ 98.329352][ T5971] loop1: detected capacity change from 0 to 164 [ 99.068015][ T27] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 99.277413][ T5906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.288081][ T5927] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 99.298730][ T5927] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 99.391949][ T27] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -110 [ 99.858786][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.032971][ T5778] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 100.239972][ T5778] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 100.258849][ T5778] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 100.269806][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.283356][ T5778] usb 4-1: Product: syz [ 100.288203][ T5778] usb 4-1: Manufacturer: syz [ 100.295799][ T5778] usb 4-1: SerialNumber: syz [ 100.317256][ T5778] usb 4-1: config 0 descriptor?? [ 100.339067][ T6004] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.363788][ T5778] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 100.382878][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 100.393330][ T27] usb 3-1: config 0 has no interfaces? [ 100.398974][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.433944][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.213892][ T27] usb 3-1: config 0 descriptor?? [ 101.291114][ T5814] usb 4-1: USB disconnect, device number 2 [ 101.375194][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.485319][ T5996] FAULT_INJECTION: forcing a failure. [ 101.485319][ T5996] name failslab, interval 1, probability 0, space 0, times 1 [ 101.511941][ T5996] CPU: 0 PID: 5996 Comm: syz.2.53 Not tainted syzkaller #0 [ 101.519402][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.529505][ T5996] Call Trace: [ 101.532832][ T5996] [ 101.535811][ T5996] dump_stack_lvl+0x18c/0x250 [ 101.540582][ T5996] ? show_regs_print_info+0x20/0x20 [ 101.545847][ T5996] ? load_image+0x420/0x420 [ 101.550401][ T5996] ? __might_sleep+0xe0/0xe0 [ 101.555013][ T5996] ? __lock_acquire+0x7eb0/0x7eb0 [ 101.560070][ T5996] should_fail_ex+0x394/0x4c0 [ 101.564796][ T5996] should_failslab+0x9/0x20 [ 101.569319][ T5996] slab_pre_alloc_hook+0x59/0x300 [ 101.574370][ T5996] ? __kernfs_new_node+0xaa/0x7f0 [ 101.579432][ T5996] ? rcu_is_watching+0x15/0xb0 [ 101.584263][ T5996] kmem_cache_alloc+0x5a/0x2c0 [ 101.589083][ T5996] ? __kernfs_new_node+0xe5/0x7f0 [ 101.594149][ T5996] __kernfs_new_node+0xe5/0x7f0 [ 101.599046][ T5996] ? kernfs_new_node+0x260/0x260 [ 101.604033][ T5996] ? sysfs_do_create_link_sd+0x75/0x110 [ 101.609620][ T5996] kernfs_new_node+0x14c/0x260 [ 101.614425][ T5996] kernfs_create_link+0xa7/0x200 [ 101.619410][ T5996] sysfs_do_create_link_sd+0x83/0x110 [ 101.624816][ T5996] module_add_driver+0x26e/0x320 [ 101.629789][ T5996] bus_add_driver+0x38c/0x630 [ 101.634509][ T5996] driver_register+0x23a/0x310 [ 101.639304][ T5996] usb_gadget_register_driver_owner+0xf9/0x270 [ 101.645498][ T5996] raw_ioctl+0x1613/0x3d80 [ 101.649980][ T5996] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 101.655656][ T5996] ? tomoyo_path_number_perm+0x217/0x5e0 [ 101.661329][ T5996] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 101.666832][ T5996] ? make_qualifier+0x260/0x260 [ 101.671765][ T5996] ? __fget_files+0x28/0x460 [ 101.676425][ T5996] ? bpf_lsm_file_ioctl+0x9/0x10 [ 101.681398][ T5996] ? security_file_ioctl+0x80/0xa0 [ 101.686548][ T5996] ? make_qualifier+0x260/0x260 [ 101.691449][ T5996] __se_sys_ioctl+0xfd/0x170 [ 101.696087][ T5996] do_syscall_64+0x55/0xb0 [ 101.700536][ T5996] ? clear_bhb_loop+0x40/0x90 [ 101.705233][ T5996] ? clear_bhb_loop+0x40/0x90 [ 101.709939][ T5996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.715890][ T5996] RIP: 0033:0x7f04a139de2b [ 101.720331][ T5996] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 101.739965][ T5996] RSP: 002b:00007f04a2320f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.748405][ T5996] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f04a139de2b [ 101.756405][ T5996] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 101.764410][ T5996] RBP: 00007f04a2321fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 101.772438][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.780439][ T5996] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000868 [ 101.788465][ T5996] [ 101.791522][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.838461][ T5996] bus_add_driver: failed to create module links for raw-gadget.1 [ 101.848587][ T5996] UDC core: USB Raw Gadget: driver registration failed: -12 [ 101.863432][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 101.898817][ T5814] usb 3-1: USB disconnect, device number 2 [ 102.368011][ T6044] C: renamed from lo (while UP) [ 102.375728][ T6044] FAULT_INJECTION: forcing a failure. [ 102.375728][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 102.395759][ T6044] CPU: 0 PID: 6044 Comm: syz.0.72 Not tainted syzkaller #0 [ 102.403048][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.413167][ T6044] Call Trace: [ 102.416494][ T6044] [ 102.419462][ T6044] dump_stack_lvl+0x18c/0x250 [ 102.424214][ T6044] ? show_regs_print_info+0x20/0x20 [ 102.429487][ T6044] ? load_image+0x420/0x420 [ 102.434052][ T6044] ? __might_sleep+0xe0/0xe0 [ 102.438698][ T6044] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.443778][ T6044] ? string+0x257/0x290 [ 102.448000][ T6044] should_fail_ex+0x394/0x4c0 [ 102.452752][ T6044] should_failslab+0x9/0x20 [ 102.457310][ T6044] slab_pre_alloc_hook+0x59/0x300 [ 102.462395][ T6044] ? sprintf+0xe8/0x140 [ 102.466607][ T6044] ? kobject_rename+0x1f6/0x4f0 [ 102.471513][ T6044] ? kobject_rename+0x1f6/0x4f0 [ 102.476422][ T6044] __kmem_cache_alloc_node+0x53/0x250 [ 102.481866][ T6044] ? kobject_rename+0x1f6/0x4f0 [ 102.486795][ T6044] __kmalloc_node_track_caller+0xa4/0x230 [ 102.492587][ T6044] ? rcu_is_watching+0x15/0xb0 [ 102.497435][ T6044] kstrdup+0x3b/0x80 [ 102.501399][ T6044] kobject_rename+0x1f6/0x4f0 [ 102.506144][ T6044] ? kobject_init_and_add+0x1a0/0x1a0 [ 102.511588][ T6044] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 102.517018][ T6044] device_rename+0x15d/0x1e0 [ 102.521661][ T6044] dev_change_name+0x308/0x8e0 [ 102.526481][ T6044] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.531563][ T6044] ? dev_alloc_name+0x1d0/0x1d0 [ 102.536480][ T6044] ? nla_strscpy+0x109/0x160 [ 102.541120][ T6044] do_setlink+0x925/0x3f40 [ 102.545600][ T6044] ? arch_stack_walk+0x160/0x190 [ 102.550596][ T6044] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 102.556807][ T6044] ? stack_trace_save+0xaa/0x100 [ 102.561794][ T6044] ? stack_trace_snprint+0xf0/0xf0 [ 102.566989][ T6044] ? __nla_validate+0x50/0x50 [ 102.571765][ T6044] ? validate_linkmsg+0x719/0x910 [ 102.576858][ T6044] rtnl_newlink+0x1848/0x2170 [ 102.581738][ T6044] ? rtnl_newlink+0x411/0x2170 [ 102.586576][ T6044] ? rtnl_setlink+0x4e0/0x4e0 [ 102.591325][ T6044] ? trace_raw_output_contention_end+0xd0/0xd0 [ 102.597542][ T6044] ? rcu_is_watching+0x15/0xb0 [ 102.602371][ T6044] ? trace_contention_end+0x39/0xe0 [ 102.607647][ T6044] ? __mutex_lock+0x30d/0xc80 [ 102.612415][ T6044] ? rtnl_setlink+0x4e0/0x4e0 [ 102.617170][ T6044] rtnetlink_rcv_msg+0x843/0xf90 [ 102.622180][ T6044] ? rtnetlink_rcv_msg+0x220/0xf90 [ 102.627350][ T6044] ? rtnetlink_bind+0x80/0x80 [ 102.632091][ T6044] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.638158][ T6044] ? lock_chain_count+0x20/0x20 [ 102.643060][ T6044] ? __local_bh_enable_ip+0x13a/0x1c0 [ 102.648477][ T6044] ? lockdep_hardirqs_on+0x98/0x150 [ 102.653733][ T6044] ? __local_bh_enable_ip+0x13a/0x1c0 [ 102.659167][ T6044] ? _local_bh_enable+0xa0/0xa0 [ 102.664081][ T6044] ? __dev_queue_xmit+0x272/0x37e0 [ 102.669258][ T6044] ? __dev_queue_xmit+0x1329/0x37e0 [ 102.674515][ T6044] ? __dev_queue_xmit+0x272/0x37e0 [ 102.679730][ T6044] ? ref_tracker_free+0x686/0x830 [ 102.684824][ T6044] netlink_rcv_skb+0x235/0x4c0 [ 102.689713][ T6044] ? rtnetlink_bind+0x80/0x80 [ 102.694458][ T6044] ? netlink_ack+0x1160/0x1160 [ 102.699285][ T6044] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.704363][ T6044] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.709648][ T6044] netlink_unicast+0x7b1/0x930 [ 102.714478][ T6044] netlink_sendmsg+0x8d0/0xbf0 [ 102.719306][ T6044] ? netlink_getsockopt+0x590/0x590 [ 102.724565][ T6044] ? apparmor_socket_sendmsg+0x8e/0x330 [ 102.730168][ T6044] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 102.735518][ T6044] ? security_socket_sendmsg+0x80/0xa0 [ 102.741030][ T6044] ? netlink_getsockopt+0x590/0x590 [ 102.746289][ T6044] ____sys_sendmsg+0x61b/0x980 [ 102.751126][ T6044] ? __asan_memset+0x22/0x40 [ 102.755765][ T6044] ? __sys_sendmsg_sock+0x30/0x30 [ 102.760822][ T6044] ? __import_iovec+0x5f2/0x850 [ 102.765720][ T6044] ? import_iovec+0x73/0xa0 [ 102.770297][ T6044] ___sys_sendmsg+0x2a6/0x360 [ 102.775049][ T6044] ? __sys_sendmsg+0x2b0/0x2b0 [ 102.779940][ T6044] __se_sys_sendmsg+0x1d0/0x2c0 [ 102.784858][ T6044] ? __x64_sys_sendmsg+0x80/0x80 [ 102.789869][ T6044] ? lockdep_hardirqs_on+0x98/0x150 [ 102.795143][ T6044] do_syscall_64+0x55/0xb0 [ 102.799648][ T6044] ? clear_bhb_loop+0x40/0x90 [ 102.804406][ T6044] ? clear_bhb_loop+0x40/0x90 [ 102.809231][ T6044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.815182][ T6044] RIP: 0033:0x7fa66759e199 [ 102.819637][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.839372][ T6044] RSP: 002b:00007fa668407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.847865][ T6044] RAX: ffffffffffffffda RBX: 00007fa667825fa0 RCX: 00007fa66759e199 [ 102.855893][ T6044] RDX: 0000000000008040 RSI: 0000200000000940 RDI: 0000000000000007 [ 102.863913][ T6044] RBP: 00007fa6676350b8 R08: 0000000000000000 R09: 0000000000000000 [ 102.871933][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.879952][ T6044] R13: 00007fa667826038 R14: 00007fa667825fa0 R15: 00007ffdcc373f98 [ 102.887990][ T6044] [ 102.891221][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.484001][ T6078] netlink: 'syz.2.85': attribute type 7 has an invalid length. [ 103.491810][ T6078] netlink: 'syz.2.85': attribute type 5 has an invalid length. [ 103.499406][ T6078] netlink: 17 bytes leftover after parsing attributes in process `syz.2.85'. [ 105.063455][ T6084] loop2: detected capacity change from 0 to 64 [ 105.226354][ T28] audit: type=1800 audit(1791237631.973:3): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.88" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 105.253144][ T6084] db_root: cannot open: /dev/sequencer2 [ 105.258841][ T6084] db_root: not a directory: /dev/sequencer2 [ 105.628387][ C0] Unknown status report in ack skb [ 105.905384][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'. [ 106.092489][ T6114] loop3: detected capacity change from 0 to 164 [ 106.330570][ T6120] loop2: detected capacity change from 0 to 64 [ 106.411856][ T6120] db_root: cannot open: /dev/sequencer2 [ 106.417579][ T6120] db_root: not a directory: /dev/sequencer2 [ 106.458148][ T28] audit: type=1800 audit(1791237633.153:4): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.100" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 107.524620][ T6136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 108.491297][ T6155] loop0: detected capacity change from 0 to 64 [ 108.616240][ T6155] db_root: cannot open: /dev/sequencer2 [ 108.622155][ T6155] db_root: not a directory: /dev/sequencer2 [ 108.631218][ T28] audit: type=1800 audit(1791237635.353:5): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.112" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 109.304108][ T6158] can0: slcan on ttyS3. [ 109.354101][ T6159] can0 (unregistered): slcan off ttyS3. [ 110.734929][ T6193] loop0: detected capacity change from 0 to 64 [ 110.893496][ T28] audit: type=1800 audit(1791237637.643:6): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.125" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 110.918575][ T6193] db_root: cannot open: /dev/sequencer2 [ 110.924443][ T6193] db_root: not a directory: /dev/sequencer2 [ 111.752770][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 111.793666][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 112.023952][ T6216] loop1: detected capacity change from 0 to 164 [ 112.542616][ T6226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.825917][ T6231] loop2: detected capacity change from 0 to 64 [ 113.047846][ T28] audit: type=1800 audit(1791237639.793:7): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.138" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 113.073580][ T6231] db_root: cannot open: /dev/sequencer2 [ 113.079254][ T6231] db_root: not a directory: /dev/sequencer2 [ 114.192234][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 114.675530][ T6272] loop0: detected capacity change from 0 to 164 [ 115.164050][ T6282] Zero length message leads to an empty skb [ 115.386901][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 115.424604][ T6289] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.264530][ T6300] autofs4:pid:6300:autofs_fill_super: called with bogus options [ 117.370025][ T6308] can0: slcan on ttyS3. [ 117.513380][ T6310] can0 (unregistered): slcan off ttyS3. [ 117.631723][ C1] sched: RT throttling activated [ 117.843232][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 117.974641][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.194867][ T5816] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.230744][ T5816] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.259312][ T5816] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.287608][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.349961][ T6314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.368172][ T5816] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 119.313055][ T6346] ucma_write: process 116 (syz.0.171) changed security contexts after opening file descriptor, this is not allowed. [ 119.518922][ T5816] usb 2-1: USB disconnect, device number 2 [ 119.829138][ T6354] FAULT_INJECTION: forcing a failure. [ 119.829138][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 119.829222][ T6354] CPU: 0 PID: 6354 Comm: syz.0.173 Not tainted syzkaller #0 [ 119.829246][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.829260][ T6354] Call Trace: [ 119.829269][ T6354] [ 119.829279][ T6354] dump_stack_lvl+0x18c/0x250 [ 119.829331][ T6354] ? show_regs_print_info+0x20/0x20 [ 119.829366][ T6354] ? load_image+0x420/0x420 [ 119.829400][ T6354] ? __might_sleep+0xe0/0xe0 [ 119.829430][ T6354] ? __lock_acquire+0x7eb0/0x7eb0 [ 119.829464][ T6354] should_fail_ex+0x394/0x4c0 [ 119.829504][ T6354] should_failslab+0x9/0x20 [ 119.829560][ T6354] slab_pre_alloc_hook+0x59/0x300 [ 119.829598][ T6354] ? __kernfs_new_node+0xaa/0x7f0 [ 119.829633][ T6354] ? __kernfs_new_node+0xaa/0x7f0 [ 119.829665][ T6354] __kmem_cache_alloc_node+0x53/0x250 [ 119.829705][ T6354] ? __asan_memset+0x22/0x40 [ 119.829741][ T6354] ? __kernfs_new_node+0xaa/0x7f0 [ 119.829773][ T6354] __kmalloc_node_track_caller+0xa4/0x230 [ 119.829814][ T6354] kstrdup+0x3b/0x80 [ 119.829847][ T6354] __kernfs_new_node+0xaa/0x7f0 [ 119.829887][ T6354] ? kernfs_new_node+0x260/0x260 [ 119.829933][ T6354] ? sysfs_do_create_link_sd+0x75/0x110 [ 119.829967][ T6354] kernfs_new_node+0x14c/0x260 [ 119.830006][ T6354] kernfs_create_link+0xa7/0x200 [ 119.830033][ T6354] sysfs_do_create_link_sd+0x83/0x110 [ 119.830062][ T6354] device_create_sys_dev_entry+0x123/0x180 [ 119.830095][ T6354] ? device_add_attrs+0x830/0x830 [ 119.830130][ T6354] ? device_create_file+0xef/0x1b0 [ 119.830163][ T6354] device_add+0x7c3/0xc40 [ 119.830196][ T6354] device_create+0x26a/0x300 [ 119.830231][ T6354] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 119.830262][ T6354] ? _raw_spin_unlock+0x40/0x40 [ 119.830293][ T6354] ? root_device_unregister+0x100/0x100 [ 119.830322][ T6354] ? update_attr+0x550/0x730 [ 119.830359][ T6354] ? is_console_locked+0x9/0x20 [ 119.830386][ T6354] ? csi_J+0xa16/0xea0 [ 119.830421][ T6354] vcs_make_sysfs+0x32/0x80 [ 119.830445][ T6354] vc_allocate+0x5a7/0x680 [ 119.830479][ T6354] ? vc_cons_allocated+0x70/0x70 [ 119.830521][ T6354] con_install+0xa0/0x720 [ 119.830554][ T6354] ? mutex_lock_nested+0x20/0x20 [ 119.830584][ T6354] ? show_tty_active+0x30/0x30 [ 119.830629][ T6354] tty_init_dev+0xd3/0x4c0 [ 119.830664][ T6354] tty_open+0x7dd/0xcc0 [ 119.830712][ T6354] ? __lock_acquire+0x7eb0/0x7eb0 [ 119.830744][ T6354] ? tty_compat_ioctl+0x8b0/0x8b0 [ 119.830782][ T6354] ? do_raw_spin_unlock+0x121/0x230 [ 119.830819][ T6354] chrdev_open+0x58c/0x600 [ 119.830851][ T6354] ? cd_forget+0x160/0x160 [ 119.830884][ T6354] ? fsnotify_perm+0x3ed/0x5e0 [ 119.830922][ T6354] do_dentry_open+0x880/0x14b0 [ 119.830957][ T6354] ? cd_forget+0x160/0x160 [ 119.830990][ T6354] path_openat+0x284f/0x3270 [ 119.831040][ T6354] ? do_sys_openat2+0xda/0x1d0 [ 119.831068][ T6354] ? __x64_sys_openat+0x139/0x160 [ 119.831101][ T6354] ? verify_lock_unused+0x140/0x140 [ 119.831129][ T6354] ? do_filp_open+0x430/0x430 [ 119.831176][ T6354] do_filp_open+0x1f2/0x430 [ 119.831207][ T6354] ? vfs_tmpfile+0x620/0x620 [ 119.831260][ T6354] ? _raw_spin_unlock+0x28/0x40 [ 119.831289][ T6354] ? alloc_fd+0x590/0x640 [ 119.831330][ T6354] do_sys_openat2+0x134/0x1d0 [ 119.831363][ T6354] ? do_sys_open+0xe0/0xe0 [ 119.831394][ T6354] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 119.831426][ T6354] ? lock_chain_count+0x20/0x20 [ 119.831459][ T6354] __x64_sys_openat+0x139/0x160 [ 119.831496][ T6354] do_syscall_64+0x55/0xb0 [ 119.831528][ T6354] ? clear_bhb_loop+0x40/0x90 [ 119.831550][ T6354] ? clear_bhb_loop+0x40/0x90 [ 119.831574][ T6354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.831608][ T6354] RIP: 0033:0x7fa66755e9ce [ 119.831638][ T6354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.831657][ T6354] RSP: 002b:00007fa6683e5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.831688][ T6354] RAX: ffffffffffffffda RBX: 00007fa6683e66c0 RCX: 00007fa66755e9ce [ 119.831715][ T6354] RDX: 0000000000000002 RSI: 00007fa6683e5c00 RDI: ffffffffffffff9c [ 119.831730][ T6354] RBP: 00007fa6676350b8 R08: 0000000000000000 R09: 0000000000000000 [ 119.831745][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.831759][ T6354] R13: 00007fa667826128 R14: 00007fa667826090 R15: 00007ffdcc373f98 [ 119.831795][ T6354] [ 121.737640][ T6354] tty tty2: ldisc open failed (-12), clearing slot 1 [ 121.973892][ T6392] Bluetooth: MGMT ver 1.22 [ 122.449569][ C1] ------------[ cut here ]------------ [ 122.455167][ C1] WARNING: CPU: 1 PID: 6389 at net/mac80211/tx.c:5057 __ieee80211_beacon_get+0x1141/0x1520 [ 122.465288][ C1] Modules linked in: [ 122.469275][ C1] CPU: 1 PID: 6389 Comm: syz.3.182 Not tainted syzkaller #0 [ 122.476657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.486783][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 122.493201][ C1] Code: f7 4c 89 ef e8 f0 56 b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb 4b 77 f7 0f 0b e9 61 f8 ff ff e8 af 4b 77 f7 <0f> 0b e9 85 fb ff ff e8 a3 4b 77 f7 48 c7 c7 40 99 65 8e 4c 89 e6 [ 122.512900][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 122.519018][ C1] RAX: ffffffff8a104501 RBX: dffffc0000000000 RCX: ffff888025a91e00 [ 122.527068][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.535116][ C1] RBP: 0000000000000000 R08: ffff888025a91e00 R09: 0000000000000003 [ 122.543186][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ddda440 [ 122.551205][ C1] R13: ffff88801cf11824 R14: ffff88805ddda930 R15: ffff88801cf11800 [ 122.559277][ C1] FS: 00007fe2f9ddf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 122.568391][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.575084][ C1] CR2: 00007fe2f6df4d58 CR3: 00000000269a3000 CR4: 00000000003506e0 [ 122.583130][ C1] Call Trace: [ 122.586456][ C1] [ 122.589370][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 122.595044][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 122.600566][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 122.607414][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 122.613118][ C1] __iterate_interfaces+0x225/0x4c0 [ 122.618398][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 122.624726][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 122.632036][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 122.638340][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 122.645548][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 122.650804][ C1] ? hw_scan_work+0xf10/0xf10 [ 122.655587][ C1] __hrtimer_run_queues+0x525/0xc10 [ 122.660860][ C1] ? hrtimer_interrupt+0x980/0x980 [ 122.666047][ C1] ? read_tsc+0x9/0x20 [ 122.670175][ C1] hrtimer_run_softirq+0x177/0x290 [ 122.675391][ C1] handle_softirqs+0x27d/0x820 [ 122.680200][ C1] ? read_tsc+0x9/0x20 [ 122.684347][ C1] ? ktime_get+0x24b/0x280 [ 122.688826][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 122.693666][ C1] ? do_softirq+0x1a0/0x1a0 [ 122.698248][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 122.703545][ C1] __irq_exit_rcu+0xd3/0x190 [ 122.708200][ C1] ? irq_exit_rcu+0x20/0x20 [ 122.712803][ C1] irq_exit_rcu+0x9/0x20 [ 122.717094][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 122.722810][ C1] [ 122.725781][ C1] [ 122.728757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.734822][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 122.740707][ C1] Code: 34 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 88 3e 09 e8 3e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 122.761610][ C1] RSP: 0018:ffffc9000b3972a0 EFLAGS: 00000286 [ 122.767759][ C1] RAX: f374a294b3649600 RBX: 0000000000000000 RCX: f374a294b3649600 [ 122.775800][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d4020 [ 122.783848][ C1] RBP: ffffc9000b3972f0 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 122.791891][ C1] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffff888025a91e00 [ 122.799935][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff81650ad0 [ 122.807988][ C1] ? requeue_task_rt+0x400/0x400 [ 122.813030][ C1] __schedule+0x15b6/0x4660 [ 122.817610][ C1] ? asan.module_dtor+0x20/0x20 [ 122.822564][ C1] ? mark_lock+0x94/0x320 [ 122.826959][ C1] schedule+0xbd/0x170 [ 122.831079][ C1] schedule_timeout+0xc1/0x2d0 [ 122.835923][ C1] ? console_conditional_schedule+0x40/0x40 [ 122.841896][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 122.846982][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 122.852289][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 122.857388][ C1] ? unix_find_other+0x8e0/0x8e0 [ 122.862407][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 122.867489][ C1] ? wake_bit_function+0x200/0x200 [ 122.872683][ C1] ? __rwlock_init+0x150/0x150 [ 122.877517][ C1] ? skb_copy_datagram_from_iter+0x643/0x6f0 [ 122.883603][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 122.888880][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 122.894124][ C1] ? unix_dgram_poll+0x680/0x680 [ 122.899123][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 122.905638][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 122.911243][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 122.916649][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 122.922204][ C1] ? unix_dgram_poll+0x680/0x680 [ 122.927207][ C1] ____sys_sendmsg+0x61b/0x980 [ 122.932060][ C1] ? __asan_memset+0x22/0x40 [ 122.936707][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 122.941813][ C1] ? __import_iovec+0x3fa/0x850 [ 122.946727][ C1] ? import_iovec+0x73/0xa0 [ 122.951287][ C1] ___sys_sendmsg+0x2a6/0x360 [ 122.956061][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 122.960928][ C1] ? __might_fault+0xc6/0x120 [ 122.965698][ C1] ? __might_fault+0xaa/0x120 [ 122.970438][ C1] __sys_sendmmsg+0x2ca/0x510 [ 122.975206][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 122.980298][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 122.986285][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 122.992371][ C1] ? lock_chain_count+0x20/0x20 [ 122.997287][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.002227][ C1] do_syscall_64+0x55/0xb0 [ 123.006809][ C1] ? clear_bhb_loop+0x40/0x90 [ 123.011561][ C1] ? clear_bhb_loop+0x40/0x90 [ 123.016334][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.022322][ C1] RIP: 0033:0x7fe2f8f9e199 [ 123.026809][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.046535][ C1] RSP: 002b:00007fe2f9ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.055035][ C1] RAX: ffffffffffffffda RBX: 00007fe2f9225fa0 RCX: 00007fe2f8f9e199 [ 123.063075][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 123.071093][ C1] RBP: 00007fe2f90350b8 R08: 0000000000000000 R09: 0000000000000000 [ 123.079153][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.087201][ C1] R13: 00007fe2f9226038 R14: 00007fe2f9225fa0 R15: 00007ffce37dc5f8 [ 123.095294][ C1] [ 123.098356][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.105675][ C1] CPU: 1 PID: 6389 Comm: syz.3.182 Not tainted syzkaller #0 [ 123.113004][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.123101][ C1] Call Trace: [ 123.126423][ C1] [ 123.129305][ C1] dump_stack_lvl+0x18c/0x250 [ 123.134070][ C1] ? show_regs_print_info+0x20/0x20 [ 123.139357][ C1] ? load_image+0x420/0x420 [ 123.143939][ C1] panic+0x2ca/0x720 [ 123.147898][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 123.152470][ C1] __warn+0x2e0/0x470 [ 123.156507][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 123.162296][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 123.168091][ C1] report_bug+0x2be/0x4f0 [ 123.172689][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 123.178463][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 123.184236][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 123.190032][ C1] handle_bug+0xcf/0x120 [ 123.194321][ C1] exc_invalid_op+0x1a/0x50 [ 123.198879][ C1] asm_exc_invalid_op+0x1a/0x20 [ 123.203792][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 123.210271][ C1] Code: f7 4c 89 ef e8 f0 56 b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb 4b 77 f7 0f 0b e9 61 f8 ff ff e8 af 4b 77 f7 <0f> 0b e9 85 fb ff ff e8 a3 4b 77 f7 48 c7 c7 40 99 65 8e 4c 89 e6 [ 123.229933][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 123.236146][ C1] RAX: ffffffff8a104501 RBX: dffffc0000000000 RCX: ffff888025a91e00 [ 123.244169][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.252183][ C1] RBP: 0000000000000000 R08: ffff888025a91e00 R09: 0000000000000003 [ 123.260200][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ddda440 [ 123.268213][ C1] R13: ffff88801cf11824 R14: ffff88805ddda930 R15: ffff88801cf11800 [ 123.276251][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 123.282063][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 123.287836][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 123.293467][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 123.298987][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 123.305808][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 123.311419][ C1] __iterate_interfaces+0x225/0x4c0 [ 123.316678][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 123.322975][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 123.330234][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 123.336536][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 123.343626][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 123.348880][ C1] ? hw_scan_work+0xf10/0xf10 [ 123.353598][ C1] __hrtimer_run_queues+0x525/0xc10 [ 123.358838][ C1] ? hrtimer_interrupt+0x980/0x980 [ 123.363970][ C1] ? read_tsc+0x9/0x20 [ 123.368097][ C1] hrtimer_run_softirq+0x177/0x290 [ 123.373237][ C1] handle_softirqs+0x27d/0x820 [ 123.378023][ C1] ? read_tsc+0x9/0x20 [ 123.382122][ C1] ? ktime_get+0x24b/0x280 [ 123.386587][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 123.391375][ C1] ? do_softirq+0x1a0/0x1a0 [ 123.395922][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 123.401161][ C1] __irq_exit_rcu+0xd3/0x190 [ 123.405782][ C1] ? irq_exit_rcu+0x20/0x20 [ 123.410326][ C1] irq_exit_rcu+0x9/0x20 [ 123.414596][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 123.420271][ C1] [ 123.423238][ C1] [ 123.426217][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.432254][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 123.438106][ C1] Code: 34 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 88 3e 09 e8 3e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 123.457737][ C1] RSP: 0018:ffffc9000b3972a0 EFLAGS: 00000286 [ 123.463832][ C1] RAX: f374a294b3649600 RBX: 0000000000000000 RCX: f374a294b3649600 [ 123.471828][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d4020 [ 123.479820][ C1] RBP: ffffc9000b3972f0 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 123.487817][ C1] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffff888025a91e00 [ 123.495836][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff81650ad0 [ 123.503835][ C1] ? requeue_task_rt+0x400/0x400 [ 123.508820][ C1] __schedule+0x15b6/0x4660 [ 123.513366][ C1] ? asan.module_dtor+0x20/0x20 [ 123.518263][ C1] ? mark_lock+0x94/0x320 [ 123.522631][ C1] schedule+0xbd/0x170 [ 123.526725][ C1] schedule_timeout+0xc1/0x2d0 [ 123.531523][ C1] ? console_conditional_schedule+0x40/0x40 [ 123.537447][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 123.542504][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 123.547753][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 123.552812][ C1] ? unix_find_other+0x8e0/0x8e0 [ 123.557777][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 123.562827][ C1] ? wake_bit_function+0x200/0x200 [ 123.567960][ C1] ? __rwlock_init+0x150/0x150 [ 123.572751][ C1] ? skb_copy_datagram_from_iter+0x643/0x6f0 [ 123.578772][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 123.584000][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 123.589160][ C1] ? unix_dgram_poll+0x680/0x680 [ 123.594140][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 123.600586][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 123.606176][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.611499][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 123.616992][ C1] ? unix_dgram_poll+0x680/0x680 [ 123.621970][ C1] ____sys_sendmsg+0x61b/0x980 [ 123.626773][ C1] ? __asan_memset+0x22/0x40 [ 123.631408][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 123.636461][ C1] ? __import_iovec+0x3fa/0x850 [ 123.641379][ C1] ? import_iovec+0x73/0xa0 [ 123.645920][ C1] ___sys_sendmsg+0x2a6/0x360 [ 123.650640][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 123.655471][ C1] ? __might_fault+0xc6/0x120 [ 123.660165][ C1] ? __might_fault+0xaa/0x120 [ 123.664868][ C1] __sys_sendmmsg+0x2ca/0x510 [ 123.669579][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 123.674640][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 123.680597][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 123.686610][ C1] ? lock_chain_count+0x20/0x20 [ 123.691489][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.696376][ C1] do_syscall_64+0x55/0xb0 [ 123.700821][ C1] ? clear_bhb_loop+0x40/0x90 [ 123.705520][ C1] ? clear_bhb_loop+0x40/0x90 [ 123.710221][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.716146][ C1] RIP: 0033:0x7fe2f8f9e199 [ 123.720609][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.740236][ C1] RSP: 002b:00007fe2f9ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.748672][ C1] RAX: ffffffffffffffda RBX: 00007fe2f9225fa0 RCX: 00007fe2f8f9e199 [ 123.756668][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 123.764661][ C1] RBP: 00007fe2f90350b8 R08: 0000000000000000 R09: 0000000000000000 [ 123.772676][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.780675][ C1] R13: 00007fe2f9226038 R14: 00007fe2f9225fa0 R15: 00007ffce37dc5f8 [ 123.788701][ C1] [ 123.791910][ C1] Kernel Offset: disabled [ 123.796289][ C1] Rebooting in 86400 seconds..