last executing test programs: 4.909747302s ago: executing program 2 (id=3): syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4.865067522s ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) 4.014855328s ago: executing program 1 (id=2): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc", 0x24}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0x10003, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd7d) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0, 0x7}, 0x0, 0x1}) landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) 2.906716288s ago: executing program 2 (id=6): ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x40) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) socket(0xa, 0x1, 0x0) 974.693008ms ago: executing program 1 (id=7): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 0s ago: executing program 3 (id=8): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x541042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) openat$cgroup_type(r7, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e3000000000000000000000000800070000000000"], 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, r4, 0x0, 0x0, 0xffffeffffffffffe}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 92.098830][ T10] cfg80211: failed to load regulatory.db [ 95.102797][ T5805] cgroup: Unknown subsys name 'net' [ 95.355637][ T5805] cgroup: Unknown subsys name 'cpuset' [ 95.417720][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.421443][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.093191][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.117221][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.140562][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.169480][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.170164][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.170670][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.194390][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.195231][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.223843][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.229130][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.229407][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.236858][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.254360][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.255551][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.255602][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.263697][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.269212][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.271456][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.271538][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.321121][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.323841][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.341180][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.344928][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.353360][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.367550][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.411009][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 101.682199][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 101.753058][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 101.783945][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 101.872817][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 101.885271][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.885393][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.885524][ T5825] bridge_slave_0: entered allmulticast mode [ 101.892877][ T5825] bridge_slave_0: entered promiscuous mode [ 101.968451][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.968570][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.968743][ T5825] bridge_slave_1: entered allmulticast mode [ 101.971131][ T5825] bridge_slave_1: entered promiscuous mode [ 102.160000][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.221273][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.241997][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.242162][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.242287][ T5826] bridge_slave_0: entered allmulticast mode [ 102.244173][ T5826] bridge_slave_0: entered promiscuous mode [ 102.388531][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.388687][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.388842][ T5826] bridge_slave_1: entered allmulticast mode [ 102.390681][ T5826] bridge_slave_1: entered promiscuous mode [ 102.392891][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.393017][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.393148][ T5828] bridge_slave_0: entered allmulticast mode [ 102.395195][ T5828] bridge_slave_0: entered promiscuous mode [ 102.470404][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.470601][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.470794][ T5827] bridge_slave_0: entered allmulticast mode [ 102.472825][ T5827] bridge_slave_0: entered promiscuous mode [ 102.492113][ T5834] Bluetooth: hci3: command tx timeout [ 102.492545][ T5831] Bluetooth: hci1: command tx timeout [ 102.492989][ T5831] Bluetooth: hci0: command tx timeout [ 102.493010][ T5832] Bluetooth: hci4: command tx timeout [ 102.496383][ T60] Bluetooth: hci2: command tx timeout [ 102.546024][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.546142][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.546499][ T5828] bridge_slave_1: entered allmulticast mode [ 102.566496][ T5828] bridge_slave_1: entered promiscuous mode [ 102.591437][ T5825] team0: Port device team_slave_0 added [ 102.591682][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.591806][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.591999][ T5827] bridge_slave_1: entered allmulticast mode [ 102.594137][ T5827] bridge_slave_1: entered promiscuous mode [ 102.655788][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.655943][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.656880][ T5824] bridge_slave_0: entered allmulticast mode [ 102.664856][ T5824] bridge_slave_0: entered promiscuous mode [ 102.689058][ T5825] team0: Port device team_slave_1 added [ 102.715833][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.737935][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.738085][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.738259][ T5824] bridge_slave_1: entered allmulticast mode [ 102.740610][ T5824] bridge_slave_1: entered promiscuous mode [ 102.796252][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.809137][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.851701][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.879879][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.903607][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.903622][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.903640][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.919585][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.990096][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.990953][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.990968][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.990996][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.052543][ T5826] team0: Port device team_slave_0 added [ 103.076799][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.111344][ T5826] team0: Port device team_slave_1 added [ 103.113370][ T5828] team0: Port device team_slave_0 added [ 103.143843][ T5827] team0: Port device team_slave_0 added [ 103.165903][ T5828] team0: Port device team_slave_1 added [ 103.192411][ T5827] team0: Port device team_slave_1 added [ 103.228656][ T5824] team0: Port device team_slave_0 added [ 103.264229][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.264242][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.264261][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.318070][ T5824] team0: Port device team_slave_1 added [ 103.352404][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.352422][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.352448][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.353707][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.353719][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.353737][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.449964][ T5825] hsr_slave_0: entered promiscuous mode [ 103.451233][ T5825] hsr_slave_1: entered promiscuous mode [ 103.453158][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.453169][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.453188][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.513664][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.513682][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.513712][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.915179][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.915194][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.915213][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.971831][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.971845][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.971864][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.037545][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.037563][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.037588][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.180676][ T5826] hsr_slave_0: entered promiscuous mode [ 104.181659][ T5826] hsr_slave_1: entered promiscuous mode [ 104.182457][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 104.182550][ T5826] Cannot create hsr debugfs directory [ 104.252066][ T5828] hsr_slave_0: entered promiscuous mode [ 104.253023][ T5828] hsr_slave_1: entered promiscuous mode [ 104.253690][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 104.253708][ T5828] Cannot create hsr debugfs directory [ 104.306385][ T5827] hsr_slave_0: entered promiscuous mode [ 104.314920][ T5827] hsr_slave_1: entered promiscuous mode [ 104.316157][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 104.316188][ T5827] Cannot create hsr debugfs directory [ 104.387650][ T5824] hsr_slave_0: entered promiscuous mode [ 104.388770][ T5824] hsr_slave_1: entered promiscuous mode [ 104.389525][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 104.389543][ T5824] Cannot create hsr debugfs directory [ 104.568040][ T5834] Bluetooth: hci3: command tx timeout [ 104.568072][ T5834] Bluetooth: hci4: command tx timeout [ 104.568095][ T5834] Bluetooth: hci2: command tx timeout [ 104.568116][ T5834] Bluetooth: hci0: command tx timeout [ 104.568137][ T5834] Bluetooth: hci1: command tx timeout [ 105.400615][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.449517][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.453260][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.482234][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.483742][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.524184][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.552717][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.581561][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.711997][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.752471][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.770405][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.810699][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.812440][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.865061][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.894671][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.922654][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.087907][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.124872][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.139860][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.181068][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.210483][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.242478][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.272938][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.301224][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.491204][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.530631][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.537643][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.572191][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.576377][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.601139][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.642216][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.648128][ T60] Bluetooth: hci2: command tx timeout [ 106.648219][ T60] Bluetooth: hci1: command tx timeout [ 106.648294][ T60] Bluetooth: hci3: command tx timeout [ 106.648351][ T60] Bluetooth: hci0: command tx timeout [ 106.648851][ T5834] Bluetooth: hci4: command tx timeout [ 106.703859][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.805293][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.880829][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.924314][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.943119][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.962724][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.982861][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.020964][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.040547][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.093205][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.122316][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.158034][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.206639][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.206928][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.310055][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.310207][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.352928][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.395457][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.395579][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.442148][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.474497][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.475365][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.587649][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.635563][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.636107][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.672297][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.735396][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.735723][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.845371][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.958497][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.958711][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.973549][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.072857][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.073080][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.205488][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.246450][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.246598][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.315354][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.315610][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.345391][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.413283][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.725258][ T5825] veth0_vlan: entered promiscuous mode [ 108.727403][ T5834] Bluetooth: hci4: command tx timeout [ 108.727433][ T5834] Bluetooth: hci0: command tx timeout [ 108.727454][ T5834] Bluetooth: hci3: command tx timeout [ 108.727474][ T5834] Bluetooth: hci1: command tx timeout [ 108.727493][ T5834] Bluetooth: hci2: command tx timeout [ 108.814992][ T5825] veth1_vlan: entered promiscuous mode [ 108.844298][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.858349][ T5828] veth0_vlan: entered promiscuous mode [ 108.938062][ T5828] veth1_vlan: entered promiscuous mode [ 109.071606][ T5825] veth0_macvtap: entered promiscuous mode [ 109.102514][ T5825] veth1_macvtap: entered promiscuous mode [ 109.151299][ T5828] veth0_macvtap: entered promiscuous mode [ 109.173408][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.177730][ T5827] veth0_vlan: entered promiscuous mode [ 109.238035][ T5828] veth1_macvtap: entered promiscuous mode [ 109.292327][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.328975][ T5827] veth1_vlan: entered promiscuous mode [ 109.349734][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.372838][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.434425][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.453985][ T1415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.484042][ T1415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.500584][ T1415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.539753][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.540567][ T1415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.714794][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.730750][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.746420][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.812759][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.945499][ T5827] veth0_macvtap: entered promiscuous mode [ 110.161048][ T5827] veth1_macvtap: entered promiscuous mode [ 110.464877][ T5826] veth0_vlan: entered promiscuous mode [ 110.500064][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.500082][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.557811][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.620658][ T5824] veth0_vlan: entered promiscuous mode [ 110.623877][ T5826] veth1_vlan: entered promiscuous mode [ 110.639696][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.662889][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.662919][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.733934][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.754643][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.755925][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.755944][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.837490][ T5824] veth1_vlan: entered promiscuous mode [ 110.840454][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.885906][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.973927][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.973949][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.276702][ T5826] veth0_macvtap: entered promiscuous mode [ 111.393137][ T5826] veth1_macvtap: entered promiscuous mode [ 111.485288][ T5824] veth0_macvtap: entered promiscuous mode [ 111.506793][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.506818][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.568194][ T5824] veth1_macvtap: entered promiscuous mode [ 111.637576][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.712770][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.719902][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.719986][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.822728][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.841250][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.841364][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.900264][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.924590][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.981727][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.479269][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.563944][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.566514][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.577510][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.090606][ T5943] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 115.318910][ T5135] Bluetooth: hci0: command 0x0401 tx timeout [ 115.883249][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.883272][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.202009][ T5909] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 116.386915][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.388604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.490585][ T5909] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 116.491573][ T5909] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.491607][ T5909] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.535837][ T5909] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 116.535898][ T5909] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.535926][ T5909] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.541567][ T5909] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 116.541624][ T5909] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.541653][ T5909] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.601829][ T5909] usb 3-1: string descriptor 0 read error: -22 [ 116.601991][ T5909] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 116.602015][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.899794][ T5909] adutux 3-1:168.0: interrupt endpoints not found [ 117.058040][ T5909] usb 3-1: USB disconnect, device number 2 [ 117.181196][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.181219][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.589923][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.589947][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.890016][ T5948] ------------[ cut here ]------------ [ 117.890030][ T5948] kcov->t != t [ 117.890049][ T5948] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.2.6/5948 [ 117.890107][ T5948] Modules linked in: [ 117.890146][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.890170][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.890188][ T5948] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 117.890225][ T5948] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b 64 69 09 48 89 df be 03 00 [ 117.890244][ T5948] RSP: 0018:ffffc90005327d20 EFLAGS: 00010206 [ 117.890263][ T5948] RAX: 6f8a966909c39c00 RBX: ffff888035ab1100 RCX: 0000000000000000 [ 117.890279][ T5948] RDX: 00000000888b1b09 RSI: ffffffff8ba732c0 RDI: 00000000ffffffff [ 117.890295][ T5948] RBP: ffffc90005327e78 R08: ffffffff8b2df740 R09: ffffffff8dfc80c0 [ 117.890312][ T5948] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: dffffc0000000000 [ 117.890329][ T5948] R13: 0000000000000000 R14: ffff888035ab1108 R15: ffff888028ecdc40 [ 117.890345][ T5948] FS: 0000555572396500(0000) GS:ffff888126204000(0000) knlGS:0000000000000000 [ 117.890364][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.890379][ T5948] CR2: 0000001b30e12ff8 CR3: 000000003bbb8000 CR4: 00000000003526f0 [ 117.890398][ T5948] Call Trace: [ 117.890407][ T5948] [ 117.890418][ T5948] do_exit+0x150/0x22c0 [ 117.890464][ T5948] ? __pfx_do_exit+0x10/0x10 [ 117.890490][ T5948] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.890525][ T5948] ? __rcu_read_unlock+0x83/0xe0 [ 117.890551][ T5948] ? rt_spin_unlock+0x160/0x200 [ 117.890580][ T5948] do_group_exit+0x21b/0x2d0 [ 117.890611][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.890637][ T5948] __x64_sys_exit_group+0x3f/0x40 [ 117.890664][ T5948] x64_sys_call+0x221a/0x2240 [ 117.890689][ T5948] do_syscall_64+0x15f/0xf80 [ 117.890721][ T5948] ? trace_irq_disable+0x3b/0x140 [ 117.890743][ T5948] ? clear_bhb_loop+0x40/0x90 [ 117.890768][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.890785][ T5948] RIP: 0033:0x7f1e909ec819 [ 117.890810][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.890828][ T5948] RSP: 002b:00007fff4f402288 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 117.890851][ T5948] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e909ec819 [ 117.890866][ T5948] RDX: 0000001b30824000 RSI: 000000000000000c RDI: 0000000000000000 [ 117.890881][ T5948] RBP: 00007fff4f4022ec R08: 0000000000000006 R09: 00000000000927c0 [ 117.890895][ T5948] R10: 00000000005edeac R11: 0000000000000246 R12: 0000000000000001 [ 117.890909][ T5948] R13: 00000000000927c0 R14: 000000000001b909 R15: 00007fff4f402340 [ 117.890940][ T5948] [ 117.890953][ T5948] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.890969][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.890994][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.891007][ T5948] Call Trace: [ 117.891016][ T5948] [ 117.891025][ T5948] vpanic+0x56c/0xa60 [ 117.891050][ T5948] ? __pfx__printk+0x10/0x10 [ 117.891077][ T5948] ? __pfx_vpanic+0x10/0x10 [ 117.891098][ T5948] ? is_bpf_text_address+0x292/0x2b0 [ 117.891125][ T5948] ? is_bpf_text_address+0x26/0x2b0 [ 117.891161][ T5948] panic+0xc5/0xd0 [ 117.891183][ T5948] ? __pfx_panic+0x10/0x10 [ 117.891224][ T5948] __warn+0x315/0x4c0 [ 117.891245][ T5948] ? kcov_task_exit+0xf5/0x160 [ 117.891282][ T5948] ? kcov_task_exit+0xf5/0x160 [ 117.891319][ T5948] __report_bug+0x29a/0x540 [ 117.891351][ T5948] ? trace_sched_exit_tp+0x3a/0x130 [ 117.891386][ T5948] ? kcov_task_exit+0xf5/0x160 [ 117.891422][ T5948] ? __pfx___report_bug+0x10/0x10 [ 117.891465][ T5948] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 117.891499][ T5948] ? rt_spin_lock+0x1e0/0x400 [ 117.891527][ T5948] ? rt_spin_lock+0x1e0/0x400 [ 117.891557][ T5948] ? kcov_task_exit+0xf5/0x160 [ 117.891592][ T5948] report_bug+0x16a/0x220 [ 117.891625][ T5948] ? kcov_task_exit+0xf5/0x160 [ 117.891658][ T5948] ? kcov_task_exit+0xf7/0x160 [ 117.891691][ T5948] handle_bug+0x9c/0x200 [ 117.891714][ T5948] exc_invalid_op+0x1a/0x50 [ 117.891736][ T5948] asm_exc_invalid_op+0x1a/0x20 [ 117.891758][ T5948] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 117.891793][ T5948] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b 64 69 09 48 89 df be 03 00 [ 117.891810][ T5948] RSP: 0018:ffffc90005327d20 EFLAGS: 00010206 [ 117.891829][ T5948] RAX: 6f8a966909c39c00 RBX: ffff888035ab1100 RCX: 0000000000000000 [ 117.891845][ T5948] RDX: 00000000888b1b09 RSI: ffffffff8ba732c0 RDI: 00000000ffffffff [ 117.891861][ T5948] RBP: ffffc90005327e78 R08: ffffffff8b2df740 R09: ffffffff8dfc80c0 [ 117.891878][ T5948] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: dffffc0000000000 [ 117.891895][ T5948] R13: 0000000000000000 R14: ffff888035ab1108 R15: ffff888028ecdc40 [ 117.891919][ T5948] ? rt_spin_lock+0x1e0/0x400 [ 117.891955][ T5948] do_exit+0x150/0x22c0 [ 117.891992][ T5948] ? __pfx_do_exit+0x10/0x10 [ 117.892019][ T5948] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.892052][ T5948] ? __rcu_read_unlock+0x83/0xe0 [ 117.892077][ T5948] ? rt_spin_unlock+0x160/0x200 [ 117.892107][ T5948] do_group_exit+0x21b/0x2d0 [ 117.892138][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.892163][ T5948] __x64_sys_exit_group+0x3f/0x40 [ 117.892192][ T5948] x64_sys_call+0x221a/0x2240 [ 117.892216][ T5948] do_syscall_64+0x15f/0xf80 [ 117.892246][ T5948] ? trace_irq_disable+0x3b/0x140 [ 117.892267][ T5948] ? clear_bhb_loop+0x40/0x90 [ 117.892294][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.892314][ T5948] RIP: 0033:0x7f1e909ec819 [ 117.892329][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.892343][ T5948] RSP: 002b:00007fff4f402288 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 117.892361][ T5948] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e909ec819 [ 117.892374][ T5948] RDX: 0000001b30824000 RSI: 000000000000000c RDI: 0000000000000000 [ 117.892387][ T5948] RBP: 00007fff4f4022ec R08: 0000000000000006 R09: 00000000000927c0 [ 117.892400][ T5948] R10: 00000000005edeac R11: 0000000000000246 R12: 0000000000000001 [ 117.892412][ T5948] R13: 00000000000927c0 R14: 000000000001b909 R15: 00007fff4f402340 [ 117.892451][ T5948] [ 117.893689][ T5948] Kernel Offset: disabled