last executing test programs: 6.063937273s ago: executing program 1 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/system/cpu/cpu0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/2048, 0x800) 5.886437861s ago: executing program 1 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='6\n', 0x2) close(r0) syz_usb_connect(0x3, 0x2b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040020402560001000000010902190001010080320904000001ffffff0007058101000401"], 0x0) nanosleep(&(0x7f0000000280)={0x0, 0xbebc200}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0x980914, 0x1}) r2 = syz_open_dev$video(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000500)=0x1) 3.994383597s ago: executing program 1 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff02000000000002000000000000000000000000000000640001000006020202020202010882848b960c12182403010147120100105302010055030101000006020202020202"], 0x4d) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b00000000802110000010200000000010200000000011000000002000000"], 0x1e) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000008021100000102000000000102000000000120000100000001c0010882848b960c121824"], 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff02000000000002000000000000000000000000000000640001000006020202020202010882848b960c12182403010147120100105302010055030101000006020202020202"], 0x4d) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 3.893007442s ago: executing program 3 (id=147): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrusage(0x1, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.933318606s ago: executing program 3 (id=151): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) 2.865713209s ago: executing program 1 (id=152): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffff"], 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 2.776124703s ago: executing program 2 (id=153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'\x00', {0x2, 0x0, @local}}) 2.761480924s ago: executing program 0 (id=154): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x0, 0x0) 2.551110363s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='6\n', 0x2) close(r0) syz_usb_connect(0x3, 0x2b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040020402560001000000010902190001010080320904000001ffffff0007058101000401"], 0x0) nanosleep(&(0x7f0000000280)={0x0, 0xbebc200}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0x980914, 0x1}) r2 = syz_open_dev$video(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) 2.362219962s ago: executing program 1 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/damon_reclaim/parameters/wmarks_interval\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000600)='N\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y\n', 0x2) 2.232102348s ago: executing program 2 (id=157): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x112) write(r1, &(0x7f0000000000)='3', 0x4e) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x554, r0) 2.18216274s ago: executing program 1 (id=158): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x2, 0xca01, 0x0, 0x0}, {0xd, 0x2000, 0x0, 0x0}], 0x2}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_disconnect(r0) 2.052735706s ago: executing program 2 (id=159): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 1.786488049s ago: executing program 3 (id=160): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrusage(0x1, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.785260338s ago: executing program 2 (id=161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040008100"], 0xb) 1.004059674s ago: executing program 2 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2, r2}) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 818.586873ms ago: executing program 2 (id=163): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000c60001010203010902200001010080320904000002ff0000000705020240000007058102400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="fc61") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="fa08") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="fc61") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="fa08") nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x2) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) r3 = syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x2) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) r4 = syz_open_dev$I2C(&(0x7f0000000280), 0x3, 0x2) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) 687.589609ms ago: executing program 3 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffff"], 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 633.047861ms ago: executing program 0 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/modules\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/ioports\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/iomem\x00', 0x0, 0x0) 464.156949ms ago: executing program 0 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/damon_reclaim/parameters/wmarks_interval\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000600)='N\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y\n', 0x2) 359.420434ms ago: executing program 0 (id=167): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x112) write(r1, &(0x7f0000000000)='3', 0x4e) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f564239", 0x557, r0) 247.197949ms ago: executing program 3 (id=168): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) 216.36143ms ago: executing program 0 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 3 (id=170): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040008100"], 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. syzkaller login: [ 83.537288][ T5758] cgroup: Unknown subsys name 'net' [ 83.679273][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.375582][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.356740][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.381906][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.390025][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.398737][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.407163][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.416405][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.418593][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.425466][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.435671][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.441411][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.450151][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.459256][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.460274][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.474516][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.485136][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.487289][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.496492][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.507448][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.515062][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.522683][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.548292][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.557593][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.567777][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.575402][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.079394][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 88.218567][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.314098][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.323414][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.331303][ T5770] bridge_slave_0: entered allmulticast mode [ 88.338844][ T5770] bridge_slave_0: entered promiscuous mode [ 88.348221][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.370291][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.377868][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.385456][ T5770] bridge_slave_1: entered allmulticast mode [ 88.393392][ T5770] bridge_slave_1: entered promiscuous mode [ 88.478883][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.494034][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.507395][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.577666][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.585052][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.592591][ T5773] bridge_slave_0: entered allmulticast mode [ 88.602977][ T5773] bridge_slave_0: entered promiscuous mode [ 88.626257][ T5770] team0: Port device team_slave_0 added [ 88.667915][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.676011][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.685605][ T5773] bridge_slave_1: entered allmulticast mode [ 88.693761][ T5773] bridge_slave_1: entered promiscuous mode [ 88.714772][ T5770] team0: Port device team_slave_1 added [ 88.773046][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.792451][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.803467][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.811097][ T5779] bridge_slave_0: entered allmulticast mode [ 88.818138][ T5779] bridge_slave_0: entered promiscuous mode [ 88.836452][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.846697][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.853966][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.882351][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.895503][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.902901][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.910889][ T5779] bridge_slave_1: entered allmulticast mode [ 88.918546][ T5779] bridge_slave_1: entered promiscuous mode [ 88.958154][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.965299][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.994755][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.034967][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.043009][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.050467][ T5772] bridge_slave_0: entered allmulticast mode [ 89.057732][ T5772] bridge_slave_0: entered promiscuous mode [ 89.100739][ T5773] team0: Port device team_slave_0 added [ 89.107145][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.115124][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.123070][ T5772] bridge_slave_1: entered allmulticast mode [ 89.130705][ T5772] bridge_slave_1: entered promiscuous mode [ 89.139497][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.153772][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.176828][ T5773] team0: Port device team_slave_1 added [ 89.213825][ T5770] hsr_slave_0: entered promiscuous mode [ 89.221215][ T5770] hsr_slave_1: entered promiscuous mode [ 89.277836][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.290212][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.297226][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.323893][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.339239][ T5779] team0: Port device team_slave_0 added [ 89.358214][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.380722][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.387948][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.414055][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.426970][ T5779] team0: Port device team_slave_1 added [ 89.461722][ T5772] team0: Port device team_slave_0 added [ 89.474380][ T5772] team0: Port device team_slave_1 added [ 89.560239][ T51] Bluetooth: hci0: command tx timeout [ 89.560259][ T5784] Bluetooth: hci2: command tx timeout [ 89.599373][ T5773] hsr_slave_0: entered promiscuous mode [ 89.606571][ T5773] hsr_slave_1: entered promiscuous mode [ 89.613752][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.622024][ T5773] Cannot create hsr debugfs directory [ 89.628349][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.638631][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.642114][ T51] Bluetooth: hci1: command tx timeout [ 89.667666][ T5083] Bluetooth: hci3: command tx timeout [ 89.676429][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.695644][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.702862][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.732581][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.746114][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.753664][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.780051][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.806488][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.813678][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.840106][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.915857][ T5772] hsr_slave_0: entered promiscuous mode [ 89.923080][ T5772] hsr_slave_1: entered promiscuous mode [ 89.929988][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.937596][ T5772] Cannot create hsr debugfs directory [ 90.093376][ T5779] hsr_slave_0: entered promiscuous mode [ 90.102041][ T5779] hsr_slave_1: entered promiscuous mode [ 90.108821][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.117191][ T5779] Cannot create hsr debugfs directory [ 90.377938][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.403805][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.415849][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.455048][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.534287][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.565338][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.577765][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.607644][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.681745][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.710655][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.733179][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.748911][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.841117][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.873929][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.886172][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.918511][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.932427][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.963435][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.988704][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.996103][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.029544][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.036808][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.112933][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.149342][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.162725][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.234502][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.293168][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.307628][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.315008][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.363644][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.370998][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.413298][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.458644][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.488527][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.510329][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.517544][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.565088][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.572378][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.606610][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.632407][ T51] Bluetooth: hci2: command tx timeout [ 91.634278][ T5083] Bluetooth: hci0: command tx timeout [ 91.695528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.702777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.710371][ T5083] Bluetooth: hci3: command tx timeout [ 91.715842][ T5083] Bluetooth: hci1: command tx timeout [ 91.787907][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.806956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.814252][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.915087][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.087789][ T5770] veth0_vlan: entered promiscuous mode [ 92.108477][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.133874][ T1190] cfg80211: failed to load regulatory.db [ 92.168172][ T5770] veth1_vlan: entered promiscuous mode [ 92.311923][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.321857][ T5770] veth0_macvtap: entered promiscuous mode [ 92.333840][ T5773] veth0_vlan: entered promiscuous mode [ 92.359468][ T5773] veth1_vlan: entered promiscuous mode [ 92.373673][ T5770] veth1_macvtap: entered promiscuous mode [ 92.448238][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.462574][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.483021][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.522200][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.532918][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.542764][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551549][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.569318][ T5772] veth0_vlan: entered promiscuous mode [ 92.583669][ T5772] veth1_vlan: entered promiscuous mode [ 92.622400][ T5773] veth0_macvtap: entered promiscuous mode [ 92.653310][ T5773] veth1_macvtap: entered promiscuous mode [ 92.729500][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.744435][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.758183][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.785474][ T2878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.793625][ T2878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.806249][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.828929][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.841701][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.876242][ T5772] veth0_macvtap: entered promiscuous mode [ 92.887598][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.899561][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.908799][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918754][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.939438][ T5779] veth0_vlan: entered promiscuous mode [ 92.963384][ T5772] veth1_macvtap: entered promiscuous mode [ 92.988909][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.009359][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.011240][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.021981][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.038027][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.049034][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.061477][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.093438][ T5779] veth1_vlan: entered promiscuous mode [ 93.106204][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.125946][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.136146][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.148032][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.162438][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.224873][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.244038][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.253320][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.262564][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.412562][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.435452][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.465559][ T5779] veth0_macvtap: entered promiscuous mode [ 93.506195][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.516555][ T5779] veth1_macvtap: entered promiscuous mode [ 93.529504][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.590087][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.609878][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.673155][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.677657][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.682045][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.709870][ T5083] Bluetooth: hci0: command tx timeout [ 93.715805][ T5083] Bluetooth: hci2: command tx timeout [ 93.729218][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.757235][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.770040][ T5817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.780715][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.790688][ T5083] Bluetooth: hci1: command tx timeout [ 93.791254][ T5083] Bluetooth: hci3: command tx timeout [ 93.804081][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.817114][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.835093][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.867973][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.880967][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.891275][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.903055][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.914299][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.925093][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.942547][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.994863][ T5817] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 94.009245][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.019726][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.027915][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047449][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063867][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.070187][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.095003][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.096380][ T5817] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 94.122155][ T5817] gspca_m5602: Forcing an ov7660 sensor [ 94.287788][ T2878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.307644][ T2878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311942][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 94.339824][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.362177][ T23] usb 3-1: Product: syz [ 94.383198][ T23] usb 3-1: Manufacturer: syz [ 94.387941][ T23] usb 3-1: SerialNumber: syz [ 94.467611][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.513400][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.594278][ T23] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 94.713065][ T5852] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.915277][ T5842] usb 3-1: driver API: 1.9.9 2016-02-15 [1-1] [ 94.924515][ T5842] usb 3-1: firmware API: 1.9.6 2012-07-07 [ 95.076310][ T5817] ALi m5602: probe of 2-1:1.0 failed with error -71 [ 95.106367][ T5817] usb 2-1: USB disconnect, device number 2 [ 95.147906][ T5859] netdevsim netdevsim100 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.229467][ T5860] netdevsim netdevsim100 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.517178][ T5817] usb 3-1: USB disconnect, device number 2 [ 95.524553][ C1] device 3-1 is not registered [ 95.790577][ T5083] Bluetooth: hci2: command tx timeout [ 95.800190][ T5083] Bluetooth: hci0: command tx timeout [ 95.870843][ T5083] Bluetooth: hci1: command tx timeout [ 95.960627][ T5842] usb 3-1: firmware upload failed (-110). [ 96.030402][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.231842][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.243644][ T5815] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00 [ 96.253520][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.675116][ T28] audit: type=1800 audit(1790086615.309:2): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="ipv4_port" dev="configfs" ino=6887 res=0 errno=0 [ 96.720242][ T28] audit: type=1800 audit(1790086615.349:3): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="ipv4_address" dev="configfs" ino=6888 res=0 errno=0 [ 96.780790][ T28] audit: type=1800 audit(1790086615.349:4): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="num" dev="configfs" ino=6889 res=0 errno=0 [ 96.835621][ T28] audit: type=1800 audit(1790086615.349:5): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="local" dev="configfs" ino=6890 res=0 errno=0 [ 96.877939][ T5878] syz.2.11: attempt to access beyond end of device [ 96.877939][ T5878] loop0: rw=0, sector=1, nr_sectors = 128 limit=0 [ 96.898146][ T28] audit: type=1800 audit(1790086615.449:6): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="block_bytes" dev="configfs" ino=6898 res=0 errno=0 [ 96.949962][ T5878] (syz.2.11,5878,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 96.965460][ T28] audit: type=1800 audit(1790086615.449:7): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="start_block" dev="configfs" ino=6899 res=0 errno=0 [ 96.968124][ T5878] syz.2.11: attempt to access beyond end of device [ 96.968124][ T5878] loop0: rw=0, sector=129, nr_sectors = 127 limit=0 [ 97.032239][ T28] audit: type=1800 audit(1790086615.459:8): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="blocks" dev="configfs" ino=6900 res=0 errno=0 [ 97.042740][ T5878] (syz.2.11,5878,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 97.075907][ T28] audit: type=1800 audit(1790086615.469:9): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="dev" dev="configfs" ino=6901 res=0 errno=0 [ 97.080163][ T5878] (syz.2.11,5878,0):o2hb_region_dev_store:1853 ERROR: status = -5 [ 97.162197][ T5882] o2cb: Local heartbeat has not been started. [ 97.168592][ T5882] o2cb: Cluster check failed. Fix errors before retrying. [ 97.233654][ T5882] (syz.2.11,5882,0):user_dlm_register:674 ERROR: status = -22 [ 97.296070][ T5882] (syz.2.11,5882,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "syz" [ 97.683423][ T5884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.713944][ T5815] usbhid 2-1:1.0: can't add hid device: -71 [ 97.727763][ T5815] usbhid: probe of 2-1:1.0 failed with error -71 [ 97.743545][ T5815] usb 2-1: USB disconnect, device number 3 [ 97.889925][ T5083] Bluetooth: hci0: command tx timeout [ 98.006361][ T5890] Bluetooth: MGMT ver 1.22 [ 98.184388][ T5899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.396370][ T5902] svc: failed to register nfsdv3 RPC service (errno 111). [ 98.405776][ T5902] svc: failed to register nfsaclv3 RPC service (errno 111). [ 98.465912][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.550972][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.622803][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.689007][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.902850][ T28] audit: type=1800 audit(1790086617.539:10): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19" name="ipv4_port" dev="configfs" ino=7980 res=0 errno=0 [ 98.939721][ T28] audit: type=1800 audit(1790086617.559:11): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19" name="ipv4_address" dev="configfs" ino=7981 res=0 errno=0 [ 98.972325][ T5911] syz.2.19: attempt to access beyond end of device [ 98.972325][ T5911] loop0: rw=0, sector=1, nr_sectors = 128 limit=0 [ 98.992490][ T5911] (syz.2.19,5911,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 99.002418][ T5911] syz.2.19: attempt to access beyond end of device [ 99.002418][ T5911] loop0: rw=0, sector=129, nr_sectors = 127 limit=0 [ 99.018177][ T5911] (syz.2.19,5911,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 99.029122][ T5911] (syz.2.19,5911,1):o2hb_region_dev_store:1853 ERROR: status = -5 [ 99.126629][ T5910] o2cb: Local heartbeat has not been started. [ 99.133632][ T5910] o2cb: Cluster check failed. Fix errors before retrying. [ 99.141224][ T5910] (syz.2.19,5910,1):user_dlm_register:674 ERROR: status = -22 [ 99.148854][ T5910] (syz.2.19,5910,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydomain" [ 99.822578][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.030235][ T5083] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 100.733310][ T5942] ip_tables: iptables: counters copy to user failed while replacing table [ 100.885240][ T5944] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.013289][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 101.195328][ T5955] kAFS: Can only specify source 'none' with -o dyn [ 101.459846][ T5842] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.658963][ T5842] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 101.689140][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.726203][ T5842] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 101.732817][ T5842] gspca_m5602: Forcing an ov7660 sensor [ 101.769894][ T5971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.270091][ T5083] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 102.324623][ T5982] FAULT_INJECTION: forcing a failure. [ 102.324623][ T5982] name failslab, interval 1, probability 0, space 0, times 1 [ 102.346908][ T5982] CPU: 0 PID: 5982 Comm: syz.1.45 Not tainted syzkaller #0 [ 102.354216][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.364363][ T5982] Call Trace: [ 102.367717][ T5982] [ 102.370693][ T5982] dump_stack_lvl+0x18c/0x250 [ 102.375462][ T5982] ? show_regs_print_info+0x20/0x20 [ 102.380733][ T5982] ? load_image+0x420/0x420 [ 102.385315][ T5982] ? __might_sleep+0xe0/0xe0 [ 102.389968][ T5982] ? __lock_acquire+0x7d80/0x7d80 [ 102.395093][ T5982] should_fail_ex+0x394/0x4c0 [ 102.399839][ T5982] should_failslab+0x9/0x20 [ 102.404411][ T5982] slab_pre_alloc_hook+0x59/0x300 [ 102.409505][ T5982] ? simp_init_net+0x65/0x190 [ 102.414326][ T5982] __kmem_cache_alloc_node+0x53/0x250 [ 102.419778][ T5982] ? simp_init_net+0x65/0x190 [ 102.424529][ T5982] kmalloc_trace+0x2a/0xe0 [ 102.429019][ T5982] simp_init_net+0x65/0x190 [ 102.433584][ T5982] ops_init+0x391/0x640 [ 102.437817][ T5982] setup_net+0x3b6/0xa20 [ 102.442137][ T5982] ? copy_net_ns+0x530/0x530 [ 102.446803][ T5982] ? copy_net_ns+0x347/0x530 [ 102.451458][ T5982] ? down_read_killable+0x1d0/0x340 [ 102.456738][ T5982] copy_net_ns+0x361/0x530 [ 102.461227][ T5982] create_new_namespaces+0x3ce/0x700 [ 102.466594][ T5982] unshare_nsproxy_namespaces+0x11a/0x160 [ 102.472438][ T5982] ksys_unshare+0x4fa/0x8f0 [ 102.477015][ T5982] ? sighand_ctor+0x50/0x50 [ 102.481585][ T5982] ? lock_chain_count+0x20/0x20 [ 102.486511][ T5982] ? syscall_enter_from_user_mode+0x25/0x80 [ 102.492470][ T5982] __x64_sys_unshare+0x38/0x40 [ 102.497314][ T5982] do_syscall_64+0x55/0xb0 [ 102.501819][ T5982] ? clear_bhb_loop+0x40/0x90 [ 102.506592][ T5982] ? clear_bhb_loop+0x40/0x90 [ 102.511348][ T5982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.517333][ T5982] RIP: 0033:0x7f10e5b9e159 [ 102.521853][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.541538][ T5982] RSP: 002b:00007f10e6af3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.550050][ T5982] RAX: ffffffffffffffda RBX: 00007f10e5e25fa0 RCX: 00007f10e5b9e159 [ 102.558087][ T5982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 102.566206][ T5982] RBP: 00007f10e5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 102.574252][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.582288][ T5982] R13: 00007f10e5e26038 R14: 00007f10e5e25fa0 R15: 00007fff36e518f8 [ 102.590393][ T5982] [ 102.658429][ T5842] ALi m5602: probe of 4-1:1.0 failed with error -71 [ 102.699954][ T5842] usb 4-1: USB disconnect, device number 2 [ 102.974628][ T5988] tcpci: probe of 0-0002 failed with error -5 [ 102.982001][ T5988] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 103.039854][ T5760] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.260990][ T5760] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 103.274177][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.305256][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 103.317604][ T5760] gspca_m5602: Forcing an ov7660 sensor [ 103.390202][ T5998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.807091][ T8] smpboot: CPU 1 is now offline [ 104.031154][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 104.039821][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 104.048209][ T5784] Bluetooth: hci2: hardware error 0x00 [ 104.215385][ T5760] ALi m5602: probe of 1-1:1.0 failed with error -71 [ 104.271425][ T5760] usb 1-1: USB disconnect, device number 2 [ 104.348933][ T8] IPVS: starting estimator thread 0... [ 104.418017][ T6014] sysfs: Unknown parameter './sys' [ 104.474136][ T6012] IPVS: using max 26 ests per chain, 62400 per kthread [ 104.658826][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 104.725701][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 105.458408][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 105.790537][ T5083] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.270435][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 106.689890][ T5760] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.729365][ T6076] (null): rxe_set_mtu: Set mtu to 4096 [ 106.747904][ T6076] lo speed is unknown, defaulting to 1000 [ 106.775356][ T6076] lo speed is unknown, defaulting to 1000 [ 106.807853][ T6076] lo speed is unknown, defaulting to 1000 [ 106.893518][ T5760] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 106.919433][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.962719][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 106.994744][ T5760] gspca_m5602: Forcing an ov7660 sensor [ 107.426442][ T5816] lo speed is unknown, defaulting to 1000 [ 107.437003][ T6076] infiniband syz0: set active [ 107.459342][ T6076] infiniband syz0: added lo [ 107.741353][ T6076] RDS/IB: syz0: added [ 107.766386][ T6076] smc: adding ib device syz0 with port count 1 [ 107.787907][ T6088] pimreg: entered allmulticast mode [ 107.801813][ T6076] smc: ib device syz0 port 1 has pnetid [ 107.826202][ T8] lo speed is unknown, defaulting to 1000 [ 107.835644][ T6087] pimreg: left allmulticast mode [ 107.879481][ T5760] ALi m5602: probe of 4-1:1.0 failed with error -71 [ 107.914721][ T5760] usb 4-1: USB disconnect, device number 3 [ 107.936111][ T6076] lo speed is unknown, defaulting to 1000 [ 108.236738][ T6076] lo speed is unknown, defaulting to 1000 [ 108.403445][ T6076] lo speed is unknown, defaulting to 1000 [ 108.760497][ T6085] NFSD: attempt to initialize umh client tracking in a container ignored. [ 108.844223][ T6085] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 108.892829][ T6085] NFSD: Unable to initialize client recovery tracking! (-22) [ 108.934652][ T6076] lo speed is unknown, defaulting to 1000 [ 108.950437][ T6085] NFSD: starting 90-second grace period (net f000045d) [ 109.469840][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 110.003510][ T6123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.186988][ T6123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.307423][ T6123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.430025][ T5760] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.444239][ T6123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.633498][ T5760] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 110.663805][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.733385][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 110.772660][ T5760] gspca_m5602: Forcing an ov7660 sensor [ 110.835324][ T6131] lo speed is unknown, defaulting to 1000 [ 111.567396][ T5760] ALi m5602: probe of 4-1:1.0 failed with error -71 [ 111.614054][ T5760] usb 4-1: USB disconnect, device number 4 [ 111.721390][ T6135] lo speed is unknown, defaulting to 1000 [ 111.758098][ T6151] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(14) [ 111.879761][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.798522][ T6179] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.111007][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 114.129991][ T5760] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.350045][ T5760] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 114.393439][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.464836][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 114.498356][ T5760] gspca_m5602: Forcing an ov7660 sensor [ 114.508454][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 115.127642][ T5760] ALi m5602: probe of 1-1:1.0 failed with error -71 [ 115.151465][ T5760] usb 1-1: USB disconnect, device number 3 [ 115.923598][ T6220] svc: failed to register nfsdv3 RPC service (errno 111). [ 115.949332][ T6220] svc: failed to register nfsaclv3 RPC service (errno 111). [ 116.272250][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 117.363753][ T6192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.402151][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.694140][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.804011][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.976927][ T6236] batman_adv: batadv0: Adding interface: wlan0 [ 118.986996][ T6236] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.024663][ T6236] batman_adv: batadv0: Interface activated: wlan0 [ 119.035585][ T6237] batman_adv: batadv0: Adding interface: virt_wifi0 [ 119.047014][ T6237] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.076783][ T6246] NFSD: attempt to initialize umh client tracking in a container ignored. [ 119.086246][ T6237] batman_adv: batadv0: Interface activated: virt_wifi0 [ 119.096540][ T6246] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 119.133147][ T6246] NFSD: Unable to initialize client recovery tracking! (-22) [ 119.163341][ T6246] NFSD: starting 90-second grace period (net f00004a2) [ 119.690481][ T6255] svc: failed to register nfsdv3 RPC service (errno 111). [ 119.713605][ T6257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.732164][ T6255] svc: failed to register nfsaclv3 RPC service (errno 111). [ 120.291825][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.520803][ T5848] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 120.548249][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.572079][ T5848] usb 1-1: Product: syz [ 120.576297][ T5848] usb 1-1: Manufacturer: syz [ 120.598103][ T5848] usb 1-1: SerialNumber: syz [ 120.620335][ T5848] usb 1-1: config 0 descriptor?? [ 120.646132][ T5848] hub 1-1:0.0: bad descriptor, ignoring hub [ 120.659737][ T5816] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.679166][ T5848] hub: probe of 1-1:0.0 failed with error -5 [ 120.849556][ T5848] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 120.874672][ T5816] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 120.898002][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.935817][ T5816] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 120.943545][ T5848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 120.966742][ T5816] gspca_m5602: Forcing an ov7660 sensor [ 120.978735][ T5848] dib0700: firmware download failed at 7 with -22 [ 121.557081][ T5816] ALi m5602: probe of 2-1:1.0 failed with error -71 [ 121.594728][ T5816] usb 2-1: USB disconnect, device number 4 [ 121.630236][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.298676][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.451761][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.545622][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.637660][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.130490][ T5848] usb 1-1: USB disconnect, device number 4 [ 124.029939][ T5848] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.235182][ T5848] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 124.246725][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.266648][ T5848] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 124.276341][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 124.305913][ T5848] gspca_m5602: Forcing an ov7660 sensor [ 124.329988][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.543480][ T8] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 124.573842][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.609859][ T8] usb 2-1: Product: syz [ 124.624241][ T8] usb 2-1: Manufacturer: syz [ 124.642315][ T8] usb 2-1: SerialNumber: syz [ 124.667832][ T8] usb 2-1: config 0 descriptor?? [ 124.695429][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 124.722384][ T8] hub: probe of 2-1:0.0 failed with error -5 [ 124.914682][ T8] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 124.944392][ T5848] ALi m5602: probe of 1-1:1.0 failed with error -71 [ 124.965409][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 124.993766][ T5848] usb 1-1: USB disconnect, device number 5 [ 125.014068][ T8] dib0700: firmware download failed at 7 with -22 [ 125.700079][ T5814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.902683][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.934423][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 125.995521][ T5814] usb 3-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice= 1.00 [ 126.026718][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.057295][ T5814] usb 3-1: Product: syz [ 126.072531][ T5814] usb 3-1: Manufacturer: syz [ 126.086931][ T5814] usb 3-1: SerialNumber: syz [ 126.112837][ T6358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.147717][ T6358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.176810][ T5814] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 126.193183][ T2878] ------------[ cut here ]------------ [ 126.199008][ T2878] WARNING: CPU: 0 PID: 2878 at net/wireless/scan.c:521 __cfg80211_bss_update+0x219b/0x21b0 [ 126.209313][ T2878] Modules linked in: [ 126.213270][ T2878] CPU: 0 PID: 2878 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 126.220865][ T2878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.230972][ T2878] Workqueue: events_unbound cfg80211_wiphy_work [ 126.237262][ T2878] RIP: 0010:__cfg80211_bss_update+0x219b/0x21b0 [ 126.243657][ T2878] Code: c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 55 fc ff ff 48 c7 c7 2c 66 8c 8e e8 bf f2 f9 f7 e9 44 fc ff ff e8 b5 66 a1 f7 <0f> 0b 4c 8b 2c 24 e9 95 fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 f3 [ 126.263319][ T2878] RSP: 0018:ffffc9000be67318 EFLAGS: 00010293 [ 126.269403][ T2878] RAX: ffffffff89e6249b RBX: ffff88807de96400 RCX: ffff88802bca8000 [ 126.277415][ T2878] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.285424][ T2878] RBP: dffffc0000000000 R08: ffff88805df1b453 R09: 1ffff1100bbe368a [ 126.293517][ T2878] R10: dffffc0000000000 R11: ffffed100bbe368b R12: ffff888078328190 [ 126.301540][ T2878] R13: ffff888078328190 R14: 0000000000000000 R15: 0000000000000001 [ 126.309525][ T2878] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 126.318497][ T2878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.325115][ T2878] CR2: 0000200000000000 CR3: 0000000061243000 CR4: 00000000003506f0 [ 126.333127][ T2878] Call Trace: [ 126.336419][ T2878] [ 126.339362][ T2878] ? do_raw_spin_lock+0x11f/0x2b0 [ 126.344456][ T2878] ? rcu_is_watching+0x15/0xb0 [ 126.349242][ T2878] ? cfg80211_inform_bss_frame_data+0xa9d/0x1330 [ 126.355665][ T2878] cfg80211_inform_bss_frame_data+0xadb/0x1330 [ 126.361927][ T2878] ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80 [ 126.368048][ T2878] ? ieee80211_bss_info_update+0x387/0x9f0 [ 126.373923][ T2878] ? ieee80211_bss_info_update+0x387/0x9f0 [ 126.379773][ T2878] ieee80211_bss_info_update+0x789/0x9f0 [ 126.385428][ T2878] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 126.390840][ T2878] ? mutex_lock_nested+0x20/0x20 [ 126.395801][ T2878] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 126.401646][ T2878] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 126.407996][ T2878] ? verify_lock_unused+0x140/0x140 [ 126.413246][ T2878] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 126.418997][ T2878] ? mark_lock+0x94/0x320 [ 126.423373][ T2878] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 126.429393][ T2878] ? __lock_acquire+0x7d80/0x7d80 [ 126.434503][ T2878] ? lock_chain_count+0x20/0x20 [ 126.439375][ T2878] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 126.445340][ T2878] ? kcov_remote_start+0x8b/0x810 [ 126.450406][ T2878] ? skb_dequeue+0x124/0x160 [ 126.455024][ T2878] ieee80211_iface_work+0x730/0xc90 [ 126.460287][ T2878] cfg80211_wiphy_work+0x228/0x260 [ 126.465422][ T2878] ? process_scheduled_works+0x975/0x1600 [ 126.471185][ T2878] process_scheduled_works+0xa60/0x1600 [ 126.476787][ T2878] ? worker_attach_to_pool+0x370/0x370 [ 126.482316][ T2878] ? assign_work+0x3cc/0x5d0 [ 126.486929][ T2878] worker_thread+0xa5e/0xfe0 [ 126.491570][ T2878] ? _raw_spin_unlock+0x40/0x40 [ 126.496434][ T2878] ? __kthread_parkme+0x71/0x1c0 [ 126.501426][ T2878] kthread+0x2fa/0x390 [ 126.505638][ T2878] ? pr_cont_work+0x550/0x550 [ 126.510406][ T2878] ? kthread_blkcg+0xd0/0xd0 [ 126.515019][ T2878] ret_from_fork+0x48/0x80 [ 126.519454][ T2878] ? kthread_blkcg+0xd0/0xd0 [ 126.524106][ T2878] ret_from_fork_asm+0x11/0x20 [ 126.528898][ T2878] [ 126.531977][ T2878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.539294][ T2878] CPU: 0 PID: 2878 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 126.546853][ T2878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.556932][ T2878] Workqueue: events_unbound cfg80211_wiphy_work [ 126.563294][ T2878] Call Trace: [ 126.566588][ T2878] [ 126.569545][ T2878] dump_stack_lvl+0x18c/0x250 [ 126.574283][ T2878] ? show_regs_print_info+0x20/0x20 [ 126.579515][ T2878] ? load_image+0x420/0x420 [ 126.584051][ T2878] panic+0x2ca/0x720 [ 126.587975][ T2878] ? bpf_jit_dump+0xd0/0xd0 [ 126.592511][ T2878] ? ret_from_fork_asm+0x11/0x20 [ 126.597469][ T2878] __warn+0x2e0/0x470 [ 126.601461][ T2878] ? __cfg80211_bss_update+0x219b/0x21b0 [ 126.607119][ T2878] ? __cfg80211_bss_update+0x219b/0x21b0 [ 126.612774][ T2878] report_bug+0x2be/0x4f0 [ 126.617119][ T2878] ? __cfg80211_bss_update+0x219b/0x21b0 [ 126.622762][ T2878] ? __cfg80211_bss_update+0x219b/0x21b0 [ 126.628402][ T2878] ? __cfg80211_bss_update+0x219d/0x21b0 [ 126.634044][ T2878] handle_bug+0xcf/0x120 [ 126.638301][ T2878] exc_invalid_op+0x1a/0x50 [ 126.642816][ T2878] asm_exc_invalid_op+0x1a/0x20 [ 126.647707][ T2878] RIP: 0010:__cfg80211_bss_update+0x219b/0x21b0 [ 126.653979][ T2878] Code: c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 55 fc ff ff 48 c7 c7 2c 66 8c 8e e8 bf f2 f9 f7 e9 44 fc ff ff e8 b5 66 a1 f7 <0f> 0b 4c 8b 2c 24 e9 95 fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 f3 [ 126.673594][ T2878] RSP: 0018:ffffc9000be67318 EFLAGS: 00010293 [ 126.679685][ T2878] RAX: ffffffff89e6249b RBX: ffff88807de96400 RCX: ffff88802bca8000 [ 126.687664][ T2878] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.695731][ T2878] RBP: dffffc0000000000 R08: ffff88805df1b453 R09: 1ffff1100bbe368a [ 126.704089][ T2878] R10: dffffc0000000000 R11: ffffed100bbe368b R12: ffff888078328190 [ 126.712087][ T2878] R13: ffff888078328190 R14: 0000000000000000 R15: 0000000000000001 [ 126.720092][ T2878] ? __cfg80211_bss_update+0x219b/0x21b0 [ 126.725771][ T2878] ? __cfg80211_bss_update+0x219b/0x21b0 [ 126.731418][ T2878] ? do_raw_spin_lock+0x11f/0x2b0 [ 126.736459][ T2878] ? rcu_is_watching+0x15/0xb0 [ 126.741239][ T2878] ? cfg80211_inform_bss_frame_data+0xa9d/0x1330 [ 126.747581][ T2878] cfg80211_inform_bss_frame_data+0xadb/0x1330 [ 126.753860][ T2878] ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80 [ 126.759976][ T2878] ? ieee80211_bss_info_update+0x387/0x9f0 [ 126.765805][ T2878] ? ieee80211_bss_info_update+0x387/0x9f0 [ 126.771622][ T2878] ieee80211_bss_info_update+0x789/0x9f0 [ 126.777270][ T2878] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 126.782653][ T2878] ? mutex_lock_nested+0x20/0x20 [ 126.787603][ T2878] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 126.793418][ T2878] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 126.799609][ T2878] ? verify_lock_unused+0x140/0x140 [ 126.804831][ T2878] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 126.810572][ T2878] ? mark_lock+0x94/0x320 [ 126.814913][ T2878] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 126.820908][ T2878] ? __lock_acquire+0x7d80/0x7d80 [ 126.825939][ T2878] ? lock_chain_count+0x20/0x20 [ 126.830812][ T2878] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 126.836758][ T2878] ? kcov_remote_start+0x8b/0x810 [ 126.841816][ T2878] ? skb_dequeue+0x124/0x160 [ 126.846426][ T2878] ieee80211_iface_work+0x730/0xc90 [ 126.851650][ T2878] cfg80211_wiphy_work+0x228/0x260 [ 126.856797][ T2878] ? process_scheduled_works+0x975/0x1600 [ 126.862579][ T2878] process_scheduled_works+0xa60/0x1600 [ 126.868188][ T2878] ? worker_attach_to_pool+0x370/0x370 [ 126.873681][ T2878] ? assign_work+0x3cc/0x5d0 [ 126.878390][ T2878] worker_thread+0xa5e/0xfe0 [ 126.883019][ T2878] ? _raw_spin_unlock+0x40/0x40 [ 126.887932][ T2878] ? __kthread_parkme+0x71/0x1c0 [ 126.892911][ T2878] kthread+0x2fa/0x390 [ 126.897000][ T2878] ? pr_cont_work+0x550/0x550 [ 126.901706][ T2878] ? kthread_blkcg+0xd0/0xd0 [ 126.906309][ T2878] ret_from_fork+0x48/0x80 [ 126.910740][ T2878] ? kthread_blkcg+0xd0/0xd0 [ 126.915344][ T2878] ret_from_fork_asm+0x11/0x20 [ 126.920131][ T2878] [ 126.923223][ T2878] Kernel Offset: disabled [ 126.927821][ T2878] Rebooting in 86400 seconds..