last executing test programs: 9.939024906s ago: executing program 4 (id=403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 8.681482715s ago: executing program 4 (id=409): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 7.648559791s ago: executing program 4 (id=420): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000032c0)={{0x12, 0x1, 0x200, 0x79, 0x98, 0x2f, 0x20, 0xccd, 0x60, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x3d, 0x9, 0x0, 0x1f, 0xb0, 0xc4, 0x2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000003840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000004480)={0x44, &(0x7f0000004200)={0x40, 0x31, 0x1, "0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.510131442s ago: executing program 1 (id=426): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) 5.497343765s ago: executing program 4 (id=427): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5.323351846s ago: executing program 3 (id=429): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "6bc6e11000", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 5.184011075s ago: executing program 0 (id=430): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 4.951745699s ago: executing program 0 (id=432): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000040000000000000000000000000000000400000000"], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4.796468495s ago: executing program 2 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/90, 0x5a}], 0x1}}], 0x1, 0x400123a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000033600)=""/102400, 0x19000) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x3, 0x2}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x7, 0xa35, 0x1, 0x1, 'syz0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x18, 0xfffffffffffffff9) 4.65103237s ago: executing program 3 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.07328097s ago: executing program 4 (id=435): socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.898336328s ago: executing program 2 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r2, &(0x7f0000000440)=""/4090, 0xffa) 3.676362877s ago: executing program 2 (id=437): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = inotify_init() readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000001008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.641455218s ago: executing program 0 (id=438): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.420982646s ago: executing program 0 (id=439): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000600)="11548ed18ef9fb321ea56283b28711ce1f4dc3b2b0f8dfb7c39ea7b63bb69858481b2195ee439a69636f8d0c57601a356649bf5756355b77b0eebab3a5a1ec4ea23f6427f735103c5f11c53f7b87366edb8018a6985f3c5a44525e87e8e4b3e9c1e475d722fd0feb967ebbb79c6df8f414d36f5adcdde3828cece24c966c2ca46bc8e14539f0d5397c55c255a99ef10a5f97430c0911452d071c81be19688e6aa4f9f9d76dc9ec8a5d1a6bbc01607a7af484573a48a089bfd81d", 0xba}, {&(0x7f0000000100)="726f2acfd6b3876bbec3cc941b7bd53861feb7cb86089b996e827296ac769d89852cc352f8982eaa5494", 0x2a}, {&(0x7f0000000700)="4e5735fae48306e701e9110fd512b5a1bfd780eec24be99297e14b06f56ac507c8067141b5360595ea201ef3658ef26b4de295123ddfc4e14d96c0e0a8bc9a38eb4f1d87bd13d4cffe13dbb67115f79253b8f9c40093be0eee256455dea671b4ce14db092f568e9a403d62de907b51780a87c4b4c7023c610c719fcf19491cce5ecb5fd3ec225d3285cf048f4a4256fe21985bbc774e43", 0x97}], 0x4) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$inet(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) 3.046499639s ago: executing program 3 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0x5f, 0x40000, &(0x7f0000000080)={0x11, 0x6, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2.956104425s ago: executing program 4 (id=441): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.742550953s ago: executing program 2 (id=442): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 2.635227807s ago: executing program 2 (id=443): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.529339424s ago: executing program 0 (id=444): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "6bc6e11000", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 2.412860397s ago: executing program 2 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'team_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "6bc6e11000", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000380)=0xc) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) 2.366117084s ago: executing program 3 (id=446): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 999.108917ms ago: executing program 3 (id=447): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 904.496935ms ago: executing program 0 (id=448): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 875.067472ms ago: executing program 1 (id=449): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "204885ade13feda5"}]}]}, 0x2c}}, 0x4000004) 693.382034ms ago: executing program 1 (id=450): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 637.093684ms ago: executing program 3 (id=451): socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 396.342772ms ago: executing program 1 (id=452): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(0x0, 0x0) 136.217958ms ago: executing program 1 (id=453): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 0s ago: executing program 1 (id=454): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000001ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0x4000, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 75.773203][ T5777] cgroup: Unknown subsys name 'net' [ 76.012838][ T5777] cgroup: Unknown subsys name 'cpuset' [ 76.089443][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.717763][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.833272][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.839703][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.842314][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.853788][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.854081][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.883615][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.885565][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.886344][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.887370][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.888377][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.892896][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.908364][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.909892][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.911153][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.911598][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.915339][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.919476][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.920228][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.923196][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.961218][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.029656][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.032017][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.034222][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.035298][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.036054][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.787764][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 80.810119][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 80.880103][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 80.913316][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 80.965149][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 81.152806][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.153961][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.154076][ T5793] bridge_slave_0: entered allmulticast mode [ 81.155647][ T5793] bridge_slave_0: entered promiscuous mode [ 81.202418][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.202525][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.202634][ T5801] bridge_slave_0: entered allmulticast mode [ 81.204042][ T5801] bridge_slave_0: entered promiscuous mode [ 81.206120][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.206231][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.206373][ T5793] bridge_slave_1: entered allmulticast mode [ 81.208026][ T5793] bridge_slave_1: entered promiscuous mode [ 81.271070][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.271161][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.271423][ T5801] bridge_slave_1: entered allmulticast mode [ 81.272804][ T5801] bridge_slave_1: entered promiscuous mode [ 81.307923][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.308047][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.308198][ T5794] bridge_slave_0: entered allmulticast mode [ 81.310954][ T5794] bridge_slave_0: entered promiscuous mode [ 81.356114][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.356228][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.356373][ T5797] bridge_slave_0: entered allmulticast mode [ 81.358209][ T5797] bridge_slave_0: entered promiscuous mode [ 81.381968][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.382084][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.382246][ T5794] bridge_slave_1: entered allmulticast mode [ 81.384610][ T5794] bridge_slave_1: entered promiscuous mode [ 81.422701][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.422926][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.423070][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.423222][ T5797] bridge_slave_1: entered allmulticast mode [ 81.425121][ T5797] bridge_slave_1: entered promiscuous mode [ 81.472956][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.473080][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.473183][ T5789] bridge_slave_0: entered allmulticast mode [ 81.474532][ T5789] bridge_slave_0: entered promiscuous mode [ 81.478164][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.483369][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.528513][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.535979][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.536137][ T5789] bridge_slave_1: entered allmulticast mode [ 81.537625][ T5789] bridge_slave_1: entered promiscuous mode [ 81.576658][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.581838][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.612993][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.634325][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.655862][ T5793] team0: Port device team_slave_0 added [ 81.658229][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.700196][ T31] cfg80211: failed to load regulatory.db [ 81.963202][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.964974][ T5793] team0: Port device team_slave_1 added [ 81.970550][ T5803] Bluetooth: hci1: command tx timeout [ 81.989764][ T5803] Bluetooth: hci2: command tx timeout [ 82.001508][ T5801] team0: Port device team_slave_0 added [ 82.020842][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.048816][ T5803] Bluetooth: hci3: command tx timeout [ 82.058022][ T5801] team0: Port device team_slave_1 added [ 82.059968][ T5803] Bluetooth: hci4: command tx timeout [ 82.060067][ T5803] Bluetooth: hci0: command tx timeout [ 82.062713][ T5794] team0: Port device team_slave_0 added [ 82.098614][ T5797] team0: Port device team_slave_0 added [ 82.120159][ T5794] team0: Port device team_slave_1 added [ 82.139303][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.139315][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.139329][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.142584][ T5797] team0: Port device team_slave_1 added [ 82.179042][ T5789] team0: Port device team_slave_0 added [ 82.181326][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.181341][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.181364][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.202736][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.202752][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.202777][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.227512][ T5789] team0: Port device team_slave_1 added [ 82.244612][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.244630][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.244653][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.265705][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.265721][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.265746][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.304232][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.304248][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.304271][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.306655][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.306669][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.306692][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.333591][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.333608][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.333631][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.382217][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.382233][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.382256][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.432390][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.432408][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.432433][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.510967][ T5793] hsr_slave_0: entered promiscuous mode [ 82.512731][ T5793] hsr_slave_1: entered promiscuous mode [ 82.526168][ T5801] hsr_slave_0: entered promiscuous mode [ 82.527528][ T5801] hsr_slave_1: entered promiscuous mode [ 82.530258][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 82.530375][ T5801] Cannot create hsr debugfs directory [ 82.590504][ T5794] hsr_slave_0: entered promiscuous mode [ 82.591788][ T5794] hsr_slave_1: entered promiscuous mode [ 82.592631][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 82.592653][ T5794] Cannot create hsr debugfs directory [ 82.665824][ T5797] hsr_slave_0: entered promiscuous mode [ 82.667338][ T5797] hsr_slave_1: entered promiscuous mode [ 82.668291][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 82.668314][ T5797] Cannot create hsr debugfs directory [ 82.749577][ T5789] hsr_slave_0: entered promiscuous mode [ 82.750373][ T5789] hsr_slave_1: entered promiscuous mode [ 82.750913][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 82.750932][ T5789] Cannot create hsr debugfs directory [ 83.719451][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.768607][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.805585][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.856562][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.955302][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.994855][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.034310][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.048913][ T5803] Bluetooth: hci1: command tx timeout [ 84.049064][ T5805] Bluetooth: hci2: command tx timeout [ 84.097452][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.138811][ T5805] Bluetooth: hci0: command tx timeout [ 84.138844][ T5805] Bluetooth: hci4: command tx timeout [ 84.138865][ T5805] Bluetooth: hci3: command tx timeout [ 84.215899][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.246303][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.266371][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.323708][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.450952][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.487080][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.512935][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.557827][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.687054][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.731711][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.732893][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.777091][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.816843][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.905194][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.933743][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.937887][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.953756][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.984993][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.985951][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.046763][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.066674][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.092284][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.092452][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.132342][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.132463][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.192386][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.208102][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.236802][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.237429][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.283070][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.283270][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.356281][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.403537][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.405652][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.406454][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.470981][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.472344][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.546665][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.612301][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.612391][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.646284][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.647041][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.694499][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.931810][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.128872][ T5803] Bluetooth: hci2: command tx timeout [ 86.128902][ T5803] Bluetooth: hci1: command tx timeout [ 86.156265][ T5793] veth0_vlan: entered promiscuous mode [ 86.208844][ T5805] Bluetooth: hci3: command tx timeout [ 86.208873][ T5805] Bluetooth: hci4: command tx timeout [ 86.208892][ T5805] Bluetooth: hci0: command tx timeout [ 86.256679][ T5793] veth1_vlan: entered promiscuous mode [ 86.404258][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.467220][ T5793] veth0_macvtap: entered promiscuous mode [ 86.492552][ T5793] veth1_macvtap: entered promiscuous mode [ 86.516660][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.520174][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.583377][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.613309][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.638141][ T5794] veth0_vlan: entered promiscuous mode [ 86.664505][ T157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.668012][ T5801] veth0_vlan: entered promiscuous mode [ 86.682231][ T157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.688548][ T157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.698421][ T157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.712157][ T5794] veth1_vlan: entered promiscuous mode [ 86.841900][ T5801] veth1_vlan: entered promiscuous mode [ 86.857872][ T5789] veth0_vlan: entered promiscuous mode [ 86.918147][ T5797] veth0_vlan: entered promiscuous mode [ 86.985093][ T5789] veth1_vlan: entered promiscuous mode [ 87.004933][ T5797] veth1_vlan: entered promiscuous mode [ 87.023387][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.023408][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.064680][ T5794] veth0_macvtap: entered promiscuous mode [ 87.109439][ T5794] veth1_macvtap: entered promiscuous mode [ 87.127260][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.127279][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.132644][ T5801] veth0_macvtap: entered promiscuous mode [ 87.158979][ T5801] veth1_macvtap: entered promiscuous mode [ 87.213040][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.222778][ T5789] veth0_macvtap: entered promiscuous mode [ 87.246005][ T5797] veth0_macvtap: entered promiscuous mode [ 87.258248][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.268145][ T5789] veth1_macvtap: entered promiscuous mode [ 87.285659][ T5797] veth1_macvtap: entered promiscuous mode [ 87.290976][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.310871][ T1180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.325586][ T1180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.359816][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.361704][ T1180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.381570][ T1180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.454699][ T4493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.470452][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.473651][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.511272][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.513937][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.541850][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.543935][ T5908] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 87.600052][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.641733][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.757393][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.768535][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.774624][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.786403][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.830314][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.833994][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.834012][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.836344][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.873849][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.983676][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.180874][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.180893][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.208972][ T5803] Bluetooth: hci1: command tx timeout [ 88.209007][ T5803] Bluetooth: hci2: command tx timeout [ 88.289481][ T5805] Bluetooth: hci0: command tx timeout [ 88.289510][ T5805] Bluetooth: hci4: command tx timeout [ 88.289527][ T5805] Bluetooth: hci3: command tx timeout [ 88.341322][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.341341][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.413383][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.413407][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.500243][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.500264][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.625745][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.625765][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.718313][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.718333][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.886599][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.886619][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.230021][ T5995] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 98.658701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.120103][ T6031] vlan2: entered allmulticast mode [ 99.120124][ T6031] veth0_to_bond: entered allmulticast mode [ 100.146273][ T6049] block device autoloading is deprecated and will be removed. [ 103.769745][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 103.783989][ T6117] Zero length message leads to an empty skb [ 103.899440][ T6122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.033578][ T6122] hub 8-0:1.0: USB hub found [ 104.044283][ T6122] hub 8-0:1.0: 1 port detected [ 105.647278][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'. [ 107.102314][ T9] usb 1-1: device descriptor read/all, error -71 [ 108.699494][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 108.701344][ T6136] vlan0: entered allmulticast mode [ 108.701362][ T6136] veth0_to_bond: entered allmulticast mode [ 108.890470][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.890499][ T43] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.890518][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.890558][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.890579][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.069606][ T43] usbtmc 5-1:16.0: bulk endpoints not found [ 110.269671][ T6167] netlink: 'syz.4.44': attribute type 10 has an invalid length. [ 110.456723][ T6174] use of bytesused == 0 is deprecated and will be removed in the future, [ 110.456738][ T6174] use the actual size instead. [ 111.589483][ T6167] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.693998][ T6203] overlayfs: failed to resolve './file1': -2 [ 112.125656][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 112.677901][ T6227] vlan0: entered allmulticast mode [ 112.677929][ T6227] veth0_to_bond: entered allmulticast mode [ 112.794863][ T809] usb 5-1: USB disconnect, device number 2 [ 113.339624][ T6246] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 114.106823][ T6267] netlink: 388 bytes leftover after parsing attributes in process `syz.3.67'. [ 115.079214][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 115.382927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.388687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.391333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.398665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.408661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.418667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.428674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.438687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.448669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.773519][ T6289] vlan2: entered allmulticast mode [ 116.773540][ T6289] veth0_to_bond: entered allmulticast mode [ 117.058783][ T5862] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.251731][ T5862] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 117.251757][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.251776][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.265078][ T5862] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.265107][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.265126][ T5862] usb 3-1: Product: syz [ 117.265140][ T5862] usb 3-1: Manufacturer: syz [ 117.265154][ T5862] usb 3-1: SerialNumber: syz [ 117.550480][ T6343] netlink: 388 bytes leftover after parsing attributes in process `syz.3.80'. [ 117.678639][ T5862] usb 3-1: 0:2 : does not exist [ 121.868688][ T5862] usb 3-1: USB disconnect, device number 2 [ 122.020528][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.671948][ T993] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 123.824891][ T993] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 123.824927][ T993] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 123.824953][ T993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.861734][ T993] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.861762][ T993] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.861781][ T993] usb 1-1: Product: syz [ 123.861794][ T993] usb 1-1: Manufacturer: syz [ 123.861807][ T993] usb 1-1: SerialNumber: syz [ 123.931945][ T993] usb 1-1: config 0 descriptor?? [ 123.986109][ T993] usb 1-1: selecting invalid altsetting 0 [ 129.279414][ T5791] usb 1-1: USB disconnect, device number 4 [ 131.419580][ T6457] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 131.524543][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 133.408736][ T5791] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.576149][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 133.591258][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.591298][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.591335][ T5791] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 133.591357][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.598159][ T5791] usb 3-1: config 0 descriptor?? [ 133.664387][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.664486][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.865683][ T6463] vlan2: entered allmulticast mode [ 134.430379][ T5791] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 135.618202][ T5791] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71). [ 135.674919][ T5791] usb 3-1: USB disconnect, device number 3 [ 135.887436][ T6496] fido_id[6496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.144791][ T6510] syz.1.130 uses obsolete (PF_INET,SOCK_PACKET) [ 137.058227][ T6521] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 137.162745][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 139.679548][ T6521] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.981907][ T6524] vlan0: entered allmulticast mode [ 140.028797][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.178805][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 140.184466][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.184498][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.184536][ T5877] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 140.184558][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.244614][ T5877] usb 5-1: config 0 descriptor?? [ 140.348715][ T993] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.518836][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 140.526465][ T993] usb 4-1: config 9 has an invalid interface number: 61 but max is 0 [ 140.526491][ T993] usb 4-1: config 9 has no interface number 0 [ 140.526522][ T993] usb 4-1: config 9 interface 61 has no altsetting 0 [ 140.563915][ T993] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=ba.e3 [ 140.563944][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.563963][ T993] usb 4-1: Product: syz [ 140.563977][ T993] usb 4-1: Manufacturer: syz [ 140.563990][ T993] usb 4-1: SerialNumber: syz [ 141.000004][ T5877] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 141.047290][ T993] dvb-usb: found a 'Terratec Cinergy HT Express' in warm state. [ 141.160882][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.161955][ T993] dvbdev: DVB: registering new adapter (Terratec Cinergy HT Express) [ 141.162040][ T993] usb 4-1: media controller created [ 141.202820][ T5877] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 141.207280][ T5877] usb 5-1: USB disconnect, device number 3 [ 141.996302][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.138097][ T6569] fido_id[6569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 142.491270][ T993] DVB: Unable to find symbol dib7000p_attach() [ 142.491286][ T993] dvb-usb: no frontend was attached by 'Terratec Cinergy HT Express' [ 142.658796][ T993] rc_core: IR keymap rc-dib0700-rc5 not found [ 142.658815][ T993] Registered IR keymap rc-empty [ 142.659468][ T993] dvb-usb: could not initialize remote control. [ 142.659480][ T993] dvb-usb: Terratec Cinergy HT Express successfully initialized and connected. [ 142.749546][ T993] usb 4-1: USB disconnect, device number 2 [ 143.021407][ T993] dvb-usb: Terratec Cinergy HT Express successfully deinitialized and disconnected. [ 143.190983][ T6594] usb usb7: usbfs: process 6594 (syz.0.156) did not claim interface 5 before use [ 143.944293][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 144.053954][ T6605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 146.256031][ T6607] vlan0: entered allmulticast mode [ 147.678747][ T993] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.108731][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 148.112590][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.112622][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.112657][ T993] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 148.112678][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.172085][ T993] usb 5-1: config 0 descriptor?? [ 150.157763][ T993] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 150.461615][ T993] corsair 0003:1B1C:1B02.0003: Failed to get K90 initial state (error -71). [ 150.504483][ T993] usb 5-1: USB disconnect, device number 4 [ 150.660144][ T6656] fido_id[6656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 150.667171][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 152.436016][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 152.539194][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 152.578785][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.732771][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 152.811439][ T9] usb 2-1: config 9 has an invalid interface number: 61 but max is 0 [ 152.811466][ T9] usb 2-1: config 9 has no interface number 0 [ 152.811496][ T9] usb 2-1: config 9 interface 61 has no altsetting 0 [ 152.817052][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=ba.e3 [ 152.817080][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.817100][ T9] usb 2-1: Product: syz [ 152.817115][ T9] usb 2-1: Manufacturer: syz [ 152.817129][ T9] usb 2-1: SerialNumber: syz [ 153.132903][ T6708] usb usb7: usbfs: process 6708 (syz.3.183) did not claim interface 5 before use [ 154.065183][ T6712] netlink: 380 bytes leftover after parsing attributes in process `syz.3.186'. [ 154.309123][ T9] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 155.060944][ T6699] vlan2: entered allmulticast mode [ 155.060965][ T6699] veth0_to_bond: entered allmulticast mode [ 155.061345][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 155.061402][ T9] dib0700: firmware download failed at 7 with -22 [ 155.081321][ T9] usb 2-1: USB disconnect, device number 2 [ 155.290904][ T5791] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.389912][ T6721] netlink: 'syz.1.189': attribute type 3 has an invalid length. [ 155.389935][ T6721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.189'. [ 155.442249][ T5791] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 155.442278][ T5791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.444954][ T5791] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 155.444982][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 155.445002][ T5791] usb 3-1: Product: syz [ 155.445016][ T5791] usb 3-1: Manufacturer: syz [ 155.445030][ T5791] usb 3-1: SerialNumber: syz [ 155.615708][ T5791] usb 3-1: config 0 descriptor?? [ 155.702472][ T5877] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.102669][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 156.105152][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.105182][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.105219][ T5877] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 156.105251][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.180980][ T5877] usb 1-1: config 0 descriptor?? [ 157.209191][ T5791] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 157.235417][ T5877] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 157.470991][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.685344][ T6653] usb 3-1: USB disconnect, device number 4 [ 159.546347][ T6758] netlink: 388 bytes leftover after parsing attributes in process `syz.1.198'. [ 159.858739][ T5877] corsair 0003:1B1C:1B02.0004: Failed to get K90 initial state (error -71). [ 159.903043][ T5877] usb 1-1: USB disconnect, device number 5 [ 160.093047][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 160.197285][ T6768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 160.905085][ T6769] vlan0: entered allmulticast mode [ 162.537887][ T6798] netlink: 388 bytes leftover after parsing attributes in process `syz.1.209'. [ 162.628745][ T5985] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.834033][ T5985] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 162.834063][ T5985] usb 4-1: config 0 interface 0 has no altsetting 0 [ 162.836856][ T5985] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.836883][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.836903][ T5985] usb 4-1: Product: syz [ 162.836917][ T5985] usb 4-1: Manufacturer: syz [ 162.836931][ T5985] usb 4-1: SerialNumber: syz [ 162.902312][ T5985] usb 4-1: config 0 descriptor?? [ 163.879061][ T6653] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.905562][ T5985] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 164.030384][ T6653] usb 2-1: Using ep0 maxpacket: 16 [ 164.032822][ T6653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.032853][ T6653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.032889][ T6653] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 164.032912][ T6653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.079828][ T6653] usb 2-1: config 0 descriptor?? [ 164.118184][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.872281][ T5906] usb 4-1: USB disconnect, device number 3 [ 165.506472][ T6653] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 166.288912][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 166.357343][ T6653] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 166.465257][ T6653] usb 2-1: USB disconnect, device number 3 [ 166.692193][ T6828] 9p: Could not find request transport: fd0x0000000000000003 [ 167.394320][ T6844] fido_id[6844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 167.547040][ T36] audit: type=1804 audit(1772593035.416:2): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.227" name="/newroot/50/file0" dev="tmpfs" ino=278 res=1 errno=0 [ 167.768950][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.239293][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 169.272100][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.272132][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.272170][ T5791] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 169.272192][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.337181][ T5791] usb 2-1: config 0 descriptor?? [ 169.906699][ T5877] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 170.182549][ T5791] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 170.364215][ T5877] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.364949][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.364972][ T5877] usb 3-1: Product: syz [ 170.364986][ T5877] usb 3-1: Manufacturer: syz [ 170.365001][ T5877] usb 3-1: SerialNumber: syz [ 170.478974][ T5877] usb 3-1: config 0 descriptor?? [ 170.741984][ T5877] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 171.287038][ T993] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.478710][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 171.501987][ T993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.502064][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.502108][ T993] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 171.502131][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.632849][ T993] usb 1-1: config 0 descriptor?? [ 171.656707][ T5791] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71). [ 171.664038][ T993] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 171.757169][ T5791] usb 2-1: USB disconnect, device number 4 [ 173.035888][ T5877] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 173.243170][ T5877] usb 3-1: USB disconnect, device number 5 [ 174.556964][ T5791] usb 1-1: USB disconnect, device number 6 [ 175.143828][ T6938] warning: `syz.2.246' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.785188][ T6933] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 175.948124][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 176.048766][ T993] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.102344][ T6943] hsr_slave_1 (unregistering): left promiscuous mode [ 176.198708][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 176.203217][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.203250][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.203463][ T993] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 176.203486][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.208344][ T993] usb 4-1: config 0 descriptor?? [ 176.923571][ T993] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 177.160457][ T6962] hub 8-0:1.0: USB hub found [ 177.163289][ T6962] hub 8-0:1.0: 1 port detected [ 178.388760][ T993] corsair 0003:1B1C:1B02.0007: Failed to get K90 initial state (error -71). [ 178.417146][ T993] usb 4-1: USB disconnect, device number 4 [ 178.463017][ T6965] fido_id[6965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 178.788757][ T993] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.978757][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 178.985080][ T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.985129][ T993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.985168][ T993] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 178.985189][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.117773][ T993] usb 5-1: config 0 descriptor?? [ 179.164635][ T993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 181.872006][ T43] usb 5-1: USB disconnect, device number 5 [ 184.434815][ T7090] netlink: 392 bytes leftover after parsing attributes in process `syz.1.283'. [ 187.899442][ T7172] hub 8-0:1.0: USB hub found [ 187.899642][ T7172] hub 8-0:1.0: 1 port detected [ 189.506533][ T7202] hub 8-0:1.0: USB hub found [ 189.509727][ T7202] hub 8-0:1.0: 1 port detected [ 192.538859][ T5985] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.634089][ T7237] hub 8-0:1.0: USB hub found [ 192.636610][ T7237] hub 8-0:1.0: 1 port detected [ 193.558736][ T5985] usb 1-1: Using ep0 maxpacket: 32 [ 193.596306][ T5985] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 193.596335][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.596354][ T5985] usb 1-1: Product: syz [ 193.596368][ T5985] usb 1-1: Manufacturer: syz [ 193.596381][ T5985] usb 1-1: SerialNumber: syz [ 193.905895][ T5985] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.906006][ T5985] usb 1-1: MIDIStreaming interface descriptor not found [ 194.068400][ T5985] usb 1-1: USB disconnect, device number 7 [ 194.314542][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.314610][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.001146][ T6653] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.007856][ T993] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.270768][ T6653] usb 3-1: Using ep0 maxpacket: 32 [ 199.316932][ T6653] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 199.316961][ T6653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.316980][ T6653] usb 3-1: Product: syz [ 199.316993][ T6653] usb 3-1: Manufacturer: syz [ 199.317008][ T6653] usb 3-1: SerialNumber: syz [ 199.318717][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 199.332744][ T993] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 199.332773][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.332791][ T993] usb 1-1: Product: syz [ 199.332805][ T993] usb 1-1: Manufacturer: syz [ 199.332818][ T993] usb 1-1: SerialNumber: syz [ 199.629876][ T6653] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.629931][ T6653] usb 3-1: MIDIStreaming interface descriptor not found [ 200.734303][ T993] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.734366][ T993] usb 1-1: MIDIStreaming interface descriptor not found [ 200.799381][ T6653] usb 3-1: USB disconnect, device number 6 [ 201.066938][ T993] usb 1-1: USB disconnect, device number 8 [ 201.990306][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 202.170181][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.266658][ T7321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 206.568711][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.718734][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 206.728335][ T5877] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.728364][ T5877] usb 1-1: config 0 has no interface number 0 [ 206.728426][ T5877] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.728468][ T5877] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 206.728491][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.812596][ T5877] usb 1-1: config 0 descriptor?? [ 207.117871][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 207.126211][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 207.127054][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 207.127826][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 207.127914][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 207.526962][ T5877] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input2 [ 207.746938][ T5877] usb 1-1: USB disconnect, device number 9 [ 208.382668][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 208.605135][ T7416] hub 8-0:1.0: USB hub found [ 208.605535][ T7416] hub 8-0:1.0: 1 port detected [ 208.673811][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 209.112116][ T7422] vlan2: entered allmulticast mode [ 210.318715][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 210.478716][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 210.480899][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.480923][ T9] usb 1-1: config 0 has no interface number 0 [ 210.483475][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 210.483501][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.483520][ T9] usb 1-1: Product: syz [ 210.483533][ T9] usb 1-1: Manufacturer: syz [ 210.483548][ T9] usb 1-1: SerialNumber: syz [ 210.491608][ T9] usb 1-1: config 0 descriptor?? [ 210.498127][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 211.179104][ T7455] usb usb7: usbfs: process 7455 (syz.4.400) did not claim interface 5 before use [ 212.599522][ T9] gspca_spca1528: reg_w err -71 [ 212.599629][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 212.611147][ T9] usb 1-1: USB disconnect, device number 10 [ 213.918730][ T993] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.068735][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 214.071227][ T993] usb 3-1: config 9 has an invalid interface number: 61 but max is 0 [ 214.071252][ T993] usb 3-1: config 9 has no interface number 0 [ 214.071283][ T993] usb 3-1: config 9 interface 61 has no altsetting 0 [ 214.079700][ T993] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=ba.e3 [ 214.079726][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.079745][ T993] usb 3-1: Product: syz [ 214.079759][ T993] usb 3-1: Manufacturer: syz [ 214.079772][ T993] usb 3-1: SerialNumber: syz [ 214.410674][ T993] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 214.412574][ T993] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 214.412617][ T993] dib0700: firmware download failed at 7 with -22 [ 214.431244][ T993] usb 3-1: USB disconnect, device number 7 [ 214.568713][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.749005][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 215.370611][ T5906] usb 5-1: config 9 has an invalid interface number: 61 but max is 0 [ 215.370639][ T5906] usb 5-1: config 9 has no interface number 0 [ 215.370671][ T5906] usb 5-1: config 9 interface 61 has no altsetting 0 [ 215.373131][ T5906] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=ba.e3 [ 215.373158][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.373178][ T5906] usb 5-1: Product: syz [ 215.373192][ T5906] usb 5-1: Manufacturer: syz [ 215.373206][ T5906] usb 5-1: SerialNumber: syz [ 215.690337][ T5906] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 215.805151][ T5906] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 215.805220][ T5906] dib0700: firmware download failed at 7 with -22 [ 215.928010][ T5906] usb 5-1: USB disconnect, device number 6 [ 218.054098][ T7544] overlayfs: failed to resolve './file0': -2 [ 218.970241][ T7555] syzkaller0: entered promiscuous mode [ 218.970257][ T7555] syzkaller0: entered allmulticast mode [ 219.198727][ T993] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.348763][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 219.355167][ T993] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.355193][ T993] usb 5-1: config 0 has no interface number 0 [ 219.357905][ T993] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 219.357932][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.357952][ T993] usb 5-1: Product: syz [ 219.357966][ T993] usb 5-1: Manufacturer: syz [ 219.357980][ T993] usb 5-1: SerialNumber: syz [ 219.420924][ T993] usb 5-1: config 0 descriptor?? [ 219.445650][ T993] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 221.506961][ T993] gspca_spca1528: reg_w err -71 [ 221.507060][ T993] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 221.544927][ T993] usb 5-1: USB disconnect, device number 7 [ 222.075491][ T7556] ------------[ cut here ]------------ [ 222.075506][ T7556] kcov->t != t [ 222.075517][ T7556] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.4.441/7556 [ 222.075580][ T7556] Modules linked in: [ 222.075617][ T7556] CPU: 1 UID: 0 PID: 7556 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.075640][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.075657][ T7556] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 222.075682][ T7556] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 54 54 00 48 89 df 5b 41 5e 41 5f e9 09 2c 5a 00 7c 1c 5b 41 5e 41 5f e9 bd 69 61 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 1b 03 60 09 48 89 df be 03 00 [ 222.075699][ T7556] RSP: 0018:ffffc90004237d20 EFLAGS: 00010283 [ 222.075717][ T7556] RAX: 911b5b43ac4e6b00 RBX: ffff88801dff2c00 RCX: 0000000000000000 [ 222.075732][ T7556] RDX: 00000000d492317c RSI: ffffffff8ba64a60 RDI: 00000000ffffffff [ 222.075746][ T7556] RBP: ffffc90004237e78 R08: ffffffff8b2451d0 R09: ffffffff8ddcd780 [ 222.075761][ T7556] R10: dffffc0000000000 R11: fffffbfff1ed46b7 R12: 1ffff11006fcd4cd [ 222.075777][ T7556] R13: 0000000000000000 R14: ffff88801dff2c08 R15: ffff888031a85b80 [ 222.075791][ T7556] FS: 000055557ec1c500(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 222.075809][ T7556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.075823][ T7556] CR2: 0000200000021000 CR3: 0000000033ab2000 CR4: 00000000003526f0 [ 222.075841][ T7556] Call Trace: [ 222.075853][ T7556] [ 222.075864][ T7556] do_exit+0xd8/0x2320 [ 222.075887][ T7556] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.075918][ T7556] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 222.075947][ T7556] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 222.075974][ T7556] ? __pfx_do_exit+0x10/0x10 [ 222.075996][ T7556] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 222.076024][ T7556] ? __rcu_read_unlock+0x83/0xe0 [ 222.076056][ T7556] ? rt_spin_unlock+0x160/0x200 [ 222.076081][ T7556] do_group_exit+0x21b/0x2d0 [ 222.076109][ T7556] __x64_sys_exit_group+0x3f/0x40 [ 222.076132][ T7556] x64_sys_call+0x221a/0x2240 [ 222.076152][ T7556] do_syscall_64+0x14d/0xf80 [ 222.076180][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.076202][ T7556] ? clear_bhb_loop+0x40/0x90 [ 222.076227][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.076248][ T7556] RIP: 0033:0x7f94525ac799 [ 222.076272][ T7556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.076288][ T7556] RSP: 002b:00007ffee2408b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 222.076308][ T7556] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f94525ac799 [ 222.076322][ T7556] RDX: 00007f9451809000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.076335][ T7556] RBP: 00007ffee2408b6c R08: 0000000000000000 R09: 00000000000927c0 [ 222.076349][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b [ 222.076361][ T7556] R13: 00000000000927c0 R14: 0000000000035554 R15: 00007ffee2408bc0 [ 222.076393][ T7556] [ 222.076403][ T7556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.076418][ T7556] CPU: 1 UID: 0 PID: 7556 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.076440][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.076451][ T7556] Call Trace: [ 222.076459][ T7556] [ 222.076467][ T7556] vpanic+0x56c/0xa60 [ 222.076499][ T7556] ? __pfx__printk+0x10/0x10 [ 222.076522][ T7556] ? __pfx_vpanic+0x10/0x10 [ 222.076550][ T7556] ? is_bpf_text_address+0x292/0x2b0 [ 222.076587][ T7556] ? is_bpf_text_address+0x26/0x2b0 [ 222.076624][ T7556] panic+0xc5/0xd0 [ 222.076654][ T7556] ? __pfx_panic+0x10/0x10 [ 222.076701][ T7556] __warn+0x315/0x4f0 [ 222.076730][ T7556] ? kcov_task_exit+0xf5/0x160 [ 222.076755][ T7556] ? kcov_task_exit+0xf5/0x160 [ 222.076780][ T7556] __report_bug+0x29a/0x540 [ 222.076815][ T7556] ? kcov_task_exit+0xf5/0x160 [ 222.076839][ T7556] ? __pfx___report_bug+0x10/0x10 [ 222.076866][ T7556] ? irqentry_exit+0x59e/0x620 [ 222.076892][ T7556] ? rcu_is_watching+0x15/0xb0 [ 222.076922][ T7556] ? kcov_task_exit+0xf7/0x160 [ 222.076943][ T7556] ? kcov_task_exit+0xf5/0x160 [ 222.076973][ T7556] ? kcov_task_exit+0xf5/0x160 [ 222.076996][ T7556] report_bug+0x16a/0x220 [ 222.077023][ T7556] ? kcov_task_exit+0xf5/0x160 [ 222.077045][ T7556] ? kcov_task_exit+0xf7/0x160 [ 222.077067][ T7556] handle_bug+0x9c/0x200 [ 222.077100][ T7556] exc_invalid_op+0x1a/0x50 [ 222.077131][ T7556] asm_exc_invalid_op+0x1a/0x20 [ 222.077151][ T7556] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 222.077174][ T7556] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 54 54 00 48 89 df 5b 41 5e 41 5f e9 09 2c 5a 00 7c 1c 5b 41 5e 41 5f e9 bd 69 61 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 1b 03 60 09 48 89 df be 03 00 [ 222.077191][ T7556] RSP: 0018:ffffc90004237d20 EFLAGS: 00010283 [ 222.077208][ T7556] RAX: 911b5b43ac4e6b00 RBX: ffff88801dff2c00 RCX: 0000000000000000 [ 222.077222][ T7556] RDX: 00000000d492317c RSI: ffffffff8ba64a60 RDI: 00000000ffffffff [ 222.077237][ T7556] RBP: ffffc90004237e78 R08: ffffffff8b2451d0 R09: ffffffff8ddcd780 [ 222.077252][ T7556] R10: dffffc0000000000 R11: fffffbfff1ed46b7 R12: 1ffff11006fcd4cd [ 222.077267][ T7556] R13: 0000000000000000 R14: ffff88801dff2c08 R15: ffff888031a85b80 [ 222.077289][ T7556] ? rt_spin_lock+0x1e0/0x400 [ 222.077321][ T7556] do_exit+0xd8/0x2320 [ 222.077342][ T7556] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.077370][ T7556] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 222.077399][ T7556] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 222.077425][ T7556] ? __pfx_do_exit+0x10/0x10 [ 222.077447][ T7556] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 222.077475][ T7556] ? __rcu_read_unlock+0x83/0xe0 [ 222.077506][ T7556] ? rt_spin_unlock+0x160/0x200 [ 222.077532][ T7556] do_group_exit+0x21b/0x2d0 [ 222.077567][ T7556] __x64_sys_exit_group+0x3f/0x40 [ 222.077590][ T7556] x64_sys_call+0x221a/0x2240 [ 222.077610][ T7556] do_syscall_64+0x14d/0xf80 [ 222.077638][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.077659][ T7556] ? clear_bhb_loop+0x40/0x90 [ 222.077684][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.077705][ T7556] RIP: 0033:0x7f94525ac799 [ 222.077723][ T7556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.077739][ T7556] RSP: 002b:00007ffee2408b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 222.077759][ T7556] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f94525ac799 [ 222.077773][ T7556] RDX: 00007f9451809000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.077786][ T7556] RBP: 00007ffee2408b6c R08: 0000000000000000 R09: 00000000000927c0 [ 222.077799][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b [ 222.077811][ T7556] R13: 00000000000927c0 R14: 0000000000035554 R15: 00007ffee2408bc0 [ 222.077843][ T7556] [ 222.078099][ T7556] Kernel Offset: disabled