last executing test programs: 7.471215017s ago: executing program 2 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 5.973043605s ago: executing program 2 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r1, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 5.891431115s ago: executing program 2 (id=53): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206050000000000000005000000000014000780080011400000000005001500000000000500010006"], 0x5c}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f00010000000009046900000e010000082402"], 0x0) 5.144084256s ago: executing program 4 (id=61): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003040)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004800}], 0x1, 0x880) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 4.888496868s ago: executing program 4 (id=62): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000020000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c0004ec777993ae04015c2a56528f80180001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 4.555794972s ago: executing program 4 (id=65): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000000}, 0x1c) 4.222606928s ago: executing program 2 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 4.200530816s ago: executing program 4 (id=69): r0 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x40, &(0x7f0000000000)="c5900f10d2817adf14ccc7ec9daf61fa07668d8a7ed9cf8c801404552a3c7555e96e3cc33ece32d662cc48c5332d372766214de23423d3d882323f74f6a6ed7f2960d9a7190b5c4754e2947d3cafa9e77b9951d265721cc8d96d7acbd87950f268e23be11e99280f15e9363dcb991bec8de3fd8031bbb14319bf45fba805bcf59daeda246d0c9d79bba7a4d73538526a410f88f228ad8531c6ca97ce33cdbf7bef") 3.362267948s ago: executing program 4 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.301594671s ago: executing program 3 (id=76): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x207, &(0x7f00006c1000/0x3000)=nil, 0x3) 3.22521174s ago: executing program 2 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 3.176015763s ago: executing program 4 (id=79): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206050000000000000005000000000014000780080011400000000005001500000000000500010006"], 0x5c}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f00010000000009046900000e010000082402"], 0x0) 3.114438464s ago: executing program 0 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r1, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.101022959s ago: executing program 3 (id=81): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, 0x0, 0xaf) close(r0) 3.086528144s ago: executing program 1 (id=82): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='loginuid\x00') pread64(r4, 0x0, 0x0, 0xfffff7ff8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x20004084) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 3.020597527s ago: executing program 0 (id=83): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xab0, 0x82180) r1 = memfd_create(&(0x7f00000004c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\x8b\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE\xf3\xbd\x1d\x01\xcc\xb4<\x00\xddo*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xaf\xec\ntb\xff\a\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU6\x8bS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8\x13\x8b\x92\\\asW\xcb*o\xb6\xb4\xed0\x03\xc6\xcamzq3*(-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x10\xce\x8b\x8b\xf4&$\xe4tg\xaa\x1f\x82\xa7\x16\x8c\xdc\xc3Q\\\xdd\xe7\xa6\x91\xa0=B\xff\x87\x94\x96#NjH\xcb(4\xfess3@\xfb5zF\xf1\x9a\xc3\xb4@\x03P\xe8L6\x82!\x82\f0\x12O\xe7\"|>\xe8\xaf\xea\xafhvzi4S3\xd5\xda\x19\xdb\xdfT\x91\f;,\xbdA\b\xad^a\x83;\xf6\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb5QV\xae\xfb1\xf2\xc7\xc16\xe2 \x80\xedq{\xb4\xae\xb0o\x99\xde\xb3\xaf\xf2\xd0#\x88\x19\xaa\xaca\x83?\xfc\x8ajw\xc19X\xba+\xee\x8aB\v\xe9Y\xcf\x977\n\x90\xf97\x96\xc2\xa8\xd6\xd8\xf15H\xea\x03(\xc7\x92\x97\xc0\xcc\xc51\xae\x1e\x89\xf6\xfa\x1f\xbd\x1f\x83\x1f\xa7Px\x15oj\xd81\xd3Q&\xab\x91\x95\xb2\x9b\x9bX\x7f\xc8\xa6\x1a{\xfb\x86\xcbw\xe2\xe5\xe4\xb5\xfe\x1f\x94\xa1\xd4\x01\x89K\a7uz7\x82\x1ay\b\x1b\x88\x03W\x1a\xdbM\xbfu\x1a6^t\"mn\xde\x9c\x99J\xbf\x83nW\x80\xd9\x9bV\xb3d\xa4\x00\xcb\xeb\x93w:Y 2\xafa\xf3\xea\xcf3\xe6{W_0\x89P\xa46\xdc\x8e\xb7\x04\xeb\x00X\x9by\x96u\xd8\x90\xfak\xa9\x97)\v\x85\xfe\x04\xb7!\xa7,\xed\xb1\x00_w', 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 2.924176734s ago: executing program 3 (id=84): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a"], 0x70}}, 0x20000800) 2.880592314s ago: executing program 0 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r0) close(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='loginuid\x00') pread64(r5, 0x0, 0x0, 0xfffff7ff8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x20004084) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 2.781887451s ago: executing program 3 (id=86): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1.896604388s ago: executing program 3 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="033f0000000000001c0012800c0001006d6163766c616e000c000280080007000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) 1.59635256s ago: executing program 0 (id=88): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) bind$inet(r0, 0x0, 0x0) 1.595109485s ago: executing program 1 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x368}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.379885395s ago: executing program 1 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xde4f93ce2129a182}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 1.278703826s ago: executing program 2 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1.127909614s ago: executing program 0 (id=92): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) 1.12271793s ago: executing program 1 (id=93): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcf3a, 0x10, 0x8000000, 0x101}, &(0x7f0000000140), &(0x7f0000000380), &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) 996.627661ms ago: executing program 3 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x6020400) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r3, 0x851, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)=0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_emit_vhci(0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) 870.497493ms ago: executing program 1 (id=95): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x13, 0x1c, 0x67, 0x0, 0x4a, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x16, 0x26, 0x0, @multicast2}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 869.951388ms ago: executing program 0 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r3, 0x851, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) syz_emit_vhci(0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) 0s ago: executing program 1 (id=97): r0 = socket$igmp(0x2, 0x3, 0x2) setuid(0xee01) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 69.569299][ T5781] cgroup: Unknown subsys name 'net' [ 69.840584][ T5781] cgroup: Unknown subsys name 'cpuset' [ 69.886714][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.313588][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313675][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.525389][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.661312][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.669191][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.669926][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.672088][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.674336][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.693028][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.702067][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.702776][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.704255][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.705273][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.811098][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.824262][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.827490][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.828964][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.829893][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.865519][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.878436][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.879453][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.880728][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.882861][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.954182][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.963642][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.964308][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.966566][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.982175][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.758040][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 74.870582][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 74.928863][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 74.991578][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 75.010306][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 75.136652][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.137348][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.137468][ T5799] bridge_slave_0: entered allmulticast mode [ 75.138997][ T5799] bridge_slave_0: entered promiscuous mode [ 75.189316][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.189381][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.189519][ T5799] bridge_slave_1: entered allmulticast mode [ 75.192221][ T5799] bridge_slave_1: entered promiscuous mode [ 75.252133][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.252218][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.252310][ T5795] bridge_slave_0: entered allmulticast mode [ 75.253901][ T5795] bridge_slave_0: entered promiscuous mode [ 75.301772][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.302456][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.302553][ T5795] bridge_slave_1: entered allmulticast mode [ 75.303890][ T5795] bridge_slave_1: entered promiscuous mode [ 75.322916][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.323032][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.323168][ T5805] bridge_slave_0: entered allmulticast mode [ 75.327232][ T5805] bridge_slave_0: entered promiscuous mode [ 75.355373][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.383182][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.383314][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.383467][ T5805] bridge_slave_1: entered allmulticast mode [ 75.385077][ T5805] bridge_slave_1: entered promiscuous mode [ 75.414176][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.437773][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.437884][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.438030][ T5804] bridge_slave_0: entered allmulticast mode [ 75.439659][ T5804] bridge_slave_0: entered promiscuous mode [ 75.459003][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.459133][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.459270][ T5802] bridge_slave_0: entered allmulticast mode [ 75.461952][ T5802] bridge_slave_0: entered promiscuous mode [ 75.488313][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.488499][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.488604][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.488738][ T5804] bridge_slave_1: entered allmulticast mode [ 75.492413][ T5804] bridge_slave_1: entered promiscuous mode [ 75.513577][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.513713][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.513858][ T5802] bridge_slave_1: entered allmulticast mode [ 75.518669][ T5802] bridge_slave_1: entered promiscuous mode [ 75.547413][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.569130][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.585103][ T5799] team0: Port device team_slave_0 added [ 75.611376][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.629398][ T5799] team0: Port device team_slave_1 added [ 75.645186][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.787403][ T5797] Bluetooth: hci1: command tx timeout [ 75.788809][ T5115] Bluetooth: hci0: command tx timeout [ 75.866069][ T5115] Bluetooth: hci2: command tx timeout [ 75.888871][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.905633][ T5795] team0: Port device team_slave_0 added [ 75.909660][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.929457][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.946084][ T5115] Bluetooth: hci3: command tx timeout [ 75.948144][ T5795] team0: Port device team_slave_1 added [ 75.969953][ T5805] team0: Port device team_slave_0 added [ 75.990306][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.990316][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.990329][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.027689][ T5805] team0: Port device team_slave_1 added [ 76.036157][ T5115] Bluetooth: hci4: command tx timeout [ 76.049838][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.049851][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.049874][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.073021][ T5804] team0: Port device team_slave_0 added [ 76.093858][ T5802] team0: Port device team_slave_0 added [ 76.110654][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.110666][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.110686][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.113911][ T5804] team0: Port device team_slave_1 added [ 76.135679][ T5802] team0: Port device team_slave_1 added [ 76.176500][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.176512][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.176529][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.190871][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.190884][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.190907][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.241324][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.241340][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.241363][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.298724][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.298739][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.298762][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.320609][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.320631][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.320654][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.325694][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.325707][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.325729][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.358446][ T5799] hsr_slave_0: entered promiscuous mode [ 76.359920][ T5799] hsr_slave_1: entered promiscuous mode [ 76.363808][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.363820][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.363842][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.438631][ T5795] hsr_slave_0: entered promiscuous mode [ 76.439842][ T5795] hsr_slave_1: entered promiscuous mode [ 76.440717][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 76.440829][ T5795] Cannot create hsr debugfs directory [ 76.512160][ T5805] hsr_slave_0: entered promiscuous mode [ 76.513392][ T5805] hsr_slave_1: entered promiscuous mode [ 76.514275][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 76.514297][ T5805] Cannot create hsr debugfs directory [ 76.583405][ T5804] hsr_slave_0: entered promiscuous mode [ 76.584116][ T5804] hsr_slave_1: entered promiscuous mode [ 76.584609][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 76.584624][ T5804] Cannot create hsr debugfs directory [ 76.635346][ T5802] hsr_slave_0: entered promiscuous mode [ 76.637696][ T5802] hsr_slave_1: entered promiscuous mode [ 76.638540][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 76.638561][ T5802] Cannot create hsr debugfs directory [ 77.564692][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.612897][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.620679][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.660070][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.660981][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.683307][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.702276][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.741838][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.844202][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.866178][ T5115] Bluetooth: hci1: command tx timeout [ 77.866203][ T5115] Bluetooth: hci0: command tx timeout [ 77.883811][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.891107][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.928868][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.935838][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.956126][ T5797] Bluetooth: hci2: command tx timeout [ 77.981152][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.001391][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.026095][ T5797] Bluetooth: hci3: command tx timeout [ 78.043221][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.106299][ T5797] Bluetooth: hci4: command tx timeout [ 78.172954][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.199370][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.203717][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.241592][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.250183][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.282085][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.302118][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.340881][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.468339][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.498608][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.503155][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.523809][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.529505][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.569401][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.593149][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.631649][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.649572][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.758564][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.792170][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.800627][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.829196][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.831057][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.834384][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.857855][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.861666][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.900623][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.928129][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.929397][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.960286][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.977153][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.977355][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.058443][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.095182][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.095299][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.134810][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.148467][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.148668][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.257820][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.347913][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.348074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.353593][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.405901][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.407693][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.482780][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.528691][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.528795][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.562197][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.585253][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.585439][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.647583][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.693431][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.759936][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.763839][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.825676][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.825799][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.949254][ T5797] Bluetooth: hci0: command tx timeout [ 79.949283][ T5797] Bluetooth: hci1: command tx timeout [ 80.026517][ T5115] Bluetooth: hci2: command tx timeout [ 80.059259][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.117000][ T5115] Bluetooth: hci3: command tx timeout [ 80.186106][ T5115] Bluetooth: hci4: command tx timeout [ 80.400714][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.442390][ T5795] veth0_vlan: entered promiscuous mode [ 80.498472][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.504832][ T5795] veth1_vlan: entered promiscuous mode [ 80.539468][ T5799] veth0_vlan: entered promiscuous mode [ 80.599542][ T5799] veth1_vlan: entered promiscuous mode [ 80.660011][ T5805] veth0_vlan: entered promiscuous mode [ 80.667941][ T5795] veth0_macvtap: entered promiscuous mode [ 80.695038][ T5795] veth1_macvtap: entered promiscuous mode [ 80.705178][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.730402][ T5805] veth1_vlan: entered promiscuous mode [ 80.732396][ T5804] veth0_vlan: entered promiscuous mode [ 80.780405][ T5804] veth1_vlan: entered promiscuous mode [ 80.782558][ T5799] veth0_macvtap: entered promiscuous mode [ 80.803081][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.822560][ T5799] veth1_macvtap: entered promiscuous mode [ 80.840380][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.880319][ T127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.895458][ T127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.910647][ T127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.914529][ T5805] veth0_macvtap: entered promiscuous mode [ 80.930554][ T127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.942864][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.953692][ T5805] veth1_macvtap: entered promiscuous mode [ 81.035504][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.093872][ T5802] veth0_vlan: entered promiscuous mode [ 81.095506][ T5804] veth0_macvtap: entered promiscuous mode [ 81.128034][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.176330][ T5804] veth1_macvtap: entered promiscuous mode [ 81.183661][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.215853][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.246520][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.330306][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.335460][ T5802] veth1_vlan: entered promiscuous mode [ 81.461201][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.557577][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.557605][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.597217][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.598925][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.625124][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.672711][ T861] cfg80211: failed to load regulatory.db [ 81.727264][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.772117][ T3584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.784018][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.979182][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021368][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.023938][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.026287][ T5115] Bluetooth: hci1: command tx timeout [ 82.026313][ T5115] Bluetooth: hci0: command tx timeout [ 82.089056][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.109735][ T5797] Bluetooth: hci2: command tx timeout [ 82.171048][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.171080][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.187632][ T5797] Bluetooth: hci3: command tx timeout [ 82.219754][ T5802] veth0_macvtap: entered promiscuous mode [ 82.266496][ T5797] Bluetooth: hci4: command tx timeout [ 82.362670][ T5802] veth1_macvtap: entered promiscuous mode [ 82.426690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.426710][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.639990][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.640010][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.712548][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.765328][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.779253][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.779267][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.954656][ T66] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.955705][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.955721][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.996284][ T66] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.011922][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.047787][ T3584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244334][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.244355][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.764617][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.764637][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.910988][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.350118][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.350138][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.495627][ T5939] netlink: 'syz.4.12': attribute type 2 has an invalid length. [ 84.558302][ T5941] cifs: Bad value for 'cache' [ 85.239503][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.239523][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.339649][ T5960] team_slave_0: entered promiscuous mode [ 85.339704][ T5960] team_slave_1: entered promiscuous mode [ 86.767396][ T5987] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 86.767423][ T5987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.917913][ T5987] vhci_hcd vhci_hcd.0: Device attached [ 87.437919][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.456138][ T861] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 87.476039][ T5870] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 87.489023][ T5998] netlink: 100 bytes leftover after parsing attributes in process `syz.3.35'. [ 87.688482][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 87.716639][ T31] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 87.716675][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.716709][ T31] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 87.716731][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.735309][ T861] usb 2-1: config 0 has no interfaces? [ 87.735342][ T861] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.735364][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.220384][ T31] usb 5-1: config 0 descriptor?? [ 88.222890][ T861] usb 2-1: config 0 descriptor?? [ 88.792116][ T5991] vhci_hcd: connection closed [ 88.829486][ T3584] vhci_hcd vhci_hcd.1: stop threads [ 88.830681][ T3584] vhci_hcd vhci_hcd.1: release socket [ 88.849584][ T5879] usb 2-1: USB disconnect, device number 2 [ 88.886879][ T3584] vhci_hcd vhci_hcd.1: disconnect device [ 88.892803][ T5870] usb 35-1: device descriptor read/64, error -71 [ 89.032802][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032838][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032863][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032888][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032912][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032936][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032961][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.032986][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.033011][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.033036][ T31] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 89.066394][ T5870] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 89.317557][ T31] cypress 0003:04B4:DE61.0001: hidraw0: USB HID v0.04 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 89.478754][ T31] usb 5-1: USB disconnect, device number 2 [ 89.606893][ T6027] fido_id[6027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 89.970665][ T5879] IPVS: starting estimator thread 0... [ 90.127023][ T6034] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 90.142514][ T6037] IPVS: using max 9 ests per chain, 21600 per kthread [ 90.488832][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.516154][ T6000] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.676146][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 90.678420][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.684181][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 90.684207][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.684227][ T31] usb 2-1: Product: syz [ 90.684241][ T31] usb 2-1: Manufacturer: syz [ 90.684255][ T31] usb 2-1: SerialNumber: syz [ 90.686900][ T6000] usb 3-1: Using ep0 maxpacket: 16 [ 90.728471][ T6000] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 90.728496][ T6000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.728514][ T6000] usb 3-1: config 0 has no interface number 0 [ 90.778662][ T6000] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 90.778690][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.778708][ T6000] usb 3-1: Product: syz [ 90.778720][ T6000] usb 3-1: Manufacturer: syz [ 90.778733][ T6000] usb 3-1: SerialNumber: syz [ 90.813099][ T6055] warning: `syz.4.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.871544][ T6000] usb 3-1: config 0 descriptor?? [ 90.978809][ T6000] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 90.978858][ T6000] uvcvideo 3-1:0.105: No valid video chain found. [ 91.201492][ T31] usb 2-1: BAAD HEADSET c_chmask mismatch [ 91.223227][ T861] usb 3-1: USB disconnect, device number 2 [ 91.329466][ T6063] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 91.329485][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.62'. [ 91.414378][ T5879] IPVS: starting estimator thread 0... [ 91.496709][ T6066] IPVS: using max 10 ests per chain, 24000 per kthread [ 91.673280][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.750091][ T31] usb 2-1: USB disconnect, device number 3 [ 92.419255][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.825381][ T6082] syz.2.68 (6082) used greatest stack depth: 18384 bytes left [ 93.091529][ T6110] ALSA: mixer_oss: invalid OSS volume '' [ 93.253211][ T6115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.84'. [ 93.633422][ T6000] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.148307][ T6123] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.148332][ T6123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.148503][ T6123] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.148520][ T6123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 94.154483][ T6121] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.154505][ T6121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.154622][ T6121] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.154639][ T6121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 94.547323][ T6000] usb 5-1: Using ep0 maxpacket: 16 [ 94.563636][ T6000] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 94.563663][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.563681][ T6000] usb 5-1: config 0 has no interface number 0 [ 94.564398][ T6125] hsr0: entered promiscuous mode [ 94.571030][ T6000] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 94.571056][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.571075][ T6000] usb 5-1: Product: syz [ 94.571089][ T6000] usb 5-1: Manufacturer: syz [ 94.571102][ T6000] usb 5-1: SerialNumber: syz [ 94.605813][ T6125] macvlan2: entered promiscuous mode [ 94.607871][ T6125] macvlan2: entered allmulticast mode [ 94.607888][ T6125] hsr0: entered allmulticast mode [ 94.607900][ T6125] hsr_slave_0: entered allmulticast mode [ 94.607917][ T6125] hsr_slave_1: entered allmulticast mode [ 94.644893][ T6125] hsr0: left allmulticast mode [ 94.644911][ T6125] hsr_slave_0: left allmulticast mode [ 94.644927][ T6125] hsr_slave_1: left allmulticast mode [ 94.707086][ T6000] usb 5-1: config 0 descriptor?? [ 94.730183][ T6000] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 94.730214][ T6000] uvcvideo 5-1:0.105: No valid video chain found. [ 94.837982][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.949293][ T6000] usb 5-1: USB disconnect, device number 3 [ 96.109215][ T6103] ------------[ cut here ]------------ [ 96.109229][ T6103] kcov->t != t [ 96.109246][ T6103] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.4.79/6103 [ 96.109302][ T6103] Modules linked in: [ 96.109338][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.109362][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.109378][ T6103] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 96.109412][ T6103] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 96.109429][ T6103] RSP: 0018:ffffc90005f1fd20 EFLAGS: 00010202 [ 96.109446][ T6103] RAX: efcef7fe92fe7d00 RBX: ffff888035856100 RCX: 0000000000000000 [ 96.109462][ T6103] RDX: 000000009fc1a67b RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 96.109476][ T6103] RBP: ffffc90005f1fe78 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 96.109492][ T6103] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 96.109508][ T6103] R13: 0000000000000000 R14: ffff888035856108 R15: ffff88801dfd3d80 [ 96.109523][ T6103] FS: 000055557989a500(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 96.109540][ T6103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.109555][ T6103] CR2: 0000200000000100 CR3: 000000004247e000 CR4: 00000000003526f0 [ 96.109573][ T6103] Call Trace: [ 96.109580][ T6103] [ 96.109591][ T6103] do_exit+0x150/0x22c0 [ 96.109616][ T6103] ? lockdep_hardirqs_on+0x7a/0x110 [ 96.109650][ T6103] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.109681][ T6103] ? reacquire_held_locks+0x104/0x190 [ 96.109710][ T6103] ? rt_spin_lock+0x1e0/0x400 [ 96.109730][ T6103] ? __pfx_do_exit+0x10/0x10 [ 96.109754][ T6103] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 96.109785][ T6103] ? rt_spin_unlock+0x160/0x200 [ 96.109808][ T6103] do_group_exit+0x21b/0x2d0 [ 96.109835][ T6103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.109859][ T6103] __x64_sys_exit_group+0x3f/0x40 [ 96.109884][ T6103] x64_sys_call+0x221a/0x2240 [ 96.109906][ T6103] do_syscall_64+0x15f/0xf80 [ 96.109931][ T6103] ? trace_irq_disable+0x3b/0x140 [ 96.109952][ T6103] ? clear_bhb_loop+0x40/0x90 [ 96.109978][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.109999][ T6103] RIP: 0033:0x7efdc420c819 [ 96.110023][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.110039][ T6103] RSP: 002b:00007ffd8c86a778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 96.110060][ T6103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efdc420c819 [ 96.110075][ T6103] RDX: 00007efdc3469000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.110088][ T6103] RBP: 00007ffd8c86a7dc R08: 0000000000000000 R09: 00000000000927c0 [ 96.110102][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 96.110115][ T6103] R13: 00000000000927c0 R14: 0000000000016a17 R15: 00007ffd8c86a830 [ 96.110148][ T6103] [ 96.110159][ T6103] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.110174][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.110197][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.110209][ T6103] Call Trace: [ 96.110217][ T6103] [ 96.110225][ T6103] vpanic+0x56c/0xa60 [ 96.110247][ T6103] ? __pfx__printk+0x10/0x10 [ 96.110272][ T6103] ? __pfx_vpanic+0x10/0x10 [ 96.110291][ T6103] ? is_bpf_text_address+0x292/0x2b0 [ 96.110316][ T6103] ? is_bpf_text_address+0x26/0x2b0 [ 96.110348][ T6103] panic+0xc5/0xd0 [ 96.110368][ T6103] ? __pfx_panic+0x10/0x10 [ 96.110410][ T6103] __warn+0x315/0x4c0 [ 96.110429][ T6103] ? kcov_task_exit+0xf5/0x160 [ 96.110461][ T6103] ? kcov_task_exit+0xf5/0x160 [ 96.110493][ T6103] __report_bug+0x29a/0x540 [ 96.110543][ T6103] ? kcov_task_exit+0xf5/0x160 [ 96.110574][ T6103] ? __pfx___report_bug+0x10/0x10 [ 96.110603][ T6103] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 96.110629][ T6103] ? rt_spin_lock+0x1e0/0x400 [ 96.110656][ T6103] ? rt_spin_lock+0x1e0/0x400 [ 96.110679][ T6103] ? kcov_task_exit+0xf5/0x160 [ 96.110709][ T6103] report_bug+0x16a/0x220 [ 96.110736][ T6103] ? kcov_task_exit+0xf5/0x160 [ 96.110765][ T6103] ? kcov_task_exit+0xf7/0x160 [ 96.110795][ T6103] handle_bug+0x9c/0x200 [ 96.110827][ T6103] exc_invalid_op+0x1a/0x50 [ 96.110856][ T6103] asm_exc_invalid_op+0x1a/0x20 [ 96.110877][ T6103] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 96.110907][ T6103] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 96.110924][ T6103] RSP: 0018:ffffc90005f1fd20 EFLAGS: 00010202 [ 96.110941][ T6103] RAX: efcef7fe92fe7d00 RBX: ffff888035856100 RCX: 0000000000000000 [ 96.110957][ T6103] RDX: 000000009fc1a67b RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 96.110972][ T6103] RBP: ffffc90005f1fe78 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 96.110988][ T6103] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 96.111003][ T6103] R13: 0000000000000000 R14: ffff888035856108 R15: ffff88801dfd3d80 [ 96.111025][ T6103] ? rt_spin_lock+0x1e0/0x400 [ 96.111054][ T6103] do_exit+0x150/0x22c0 [ 96.111077][ T6103] ? lockdep_hardirqs_on+0x7a/0x110 [ 96.111103][ T6103] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.111131][ T6103] ? reacquire_held_locks+0x104/0x190 [ 96.111159][ T6103] ? rt_spin_lock+0x1e0/0x400 [ 96.111178][ T6103] ? __pfx_do_exit+0x10/0x10 [ 96.111203][ T6103] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 96.111234][ T6103] ? rt_spin_unlock+0x160/0x200 [ 96.111256][ T6103] do_group_exit+0x21b/0x2d0 [ 96.111284][ T6103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.111307][ T6103] __x64_sys_exit_group+0x3f/0x40 [ 96.111332][ T6103] x64_sys_call+0x221a/0x2240 [ 96.111354][ T6103] do_syscall_64+0x15f/0xf80 [ 96.111379][ T6103] ? trace_irq_disable+0x3b/0x140 [ 96.111399][ T6103] ? clear_bhb_loop+0x40/0x90 [ 96.111425][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.111445][ T6103] RIP: 0033:0x7efdc420c819 [ 96.111463][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.111479][ T6103] RSP: 002b:00007ffd8c86a778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 96.111499][ T6103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efdc420c819 [ 96.111513][ T6103] RDX: 00007efdc3469000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.111526][ T6103] RBP: 00007ffd8c86a7dc R08: 0000000000000000 R09: 00000000000927c0 [ 96.111540][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 96.111553][ T6103] R13: 00000000000927c0 R14: 0000000000016a17 R15: 00007ffd8c86a830 [ 96.111586][ T6103] [ 96.112265][ T6103] Kernel Offset: disabled