last executing test programs: 1m17.968164356s ago: executing program 0 (id=117): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 1m16.392156069s ago: executing program 0 (id=121): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m16.246204313s ago: executing program 0 (id=123): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000003c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, 0x0) mkdir(&(0x7f00000004c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_MSG_GETTABLE(r5, 0x0, 0x8000) sendmmsg(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x18, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) 1m14.8387889s ago: executing program 0 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x26000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x26, 0x9, 0x10}, {0x8080000, 0x0, 0x935bf724b7effdda, 0x8, 0x9, 0x4, 0x0, 0x0, 0xa, 0x7, 0x0, 0xff}, {0x70000, 0x5000, 0x8, 0x0, 0xa, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x81, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0xfe, 0xfc}, {0x30000, 0xb000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x8e, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x7000}, {0x50000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xc, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 1m13.841961879s ago: executing program 0 (id=130): dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)="8f7a09910910f3e746f39dfe3e471f0f1978dc109458c1d5ab36fb8455604a4d5e346ac908f617e2a6cd92cecd1b9532e837b6b5685afda9fea8e67321d4a8bd198fa4735904e8556ced5c4da7566085628f310e4b73d71ae2c0ec46d50cb393e2b9b4866921804b18a517b97d132fabe7b686a811fbdb0547a38f70fc6cbdcfa9e2b8997ff646618fbf9c18aaf572aee8dcf80cfcbd79c4f2c179e53067ee4d0f153882d4b239d3faeb278d55", 0xad}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x48}, 0x20008051) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 1m12.750613729s ago: executing program 0 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000002000100000004d4008100000015000005000510000000000a004e22fffff800fc0100000000000000000000000000010600000000000000"], 0x70}, 0x1, 0x400000000000000}, 0x0) close_range(0xffffffffffffffff, r4, 0x2) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x242e80, 0x0) pwrite64(r5, 0x0, 0x0, 0x7ffffffffffffffb) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), 0x0) r6 = dup(r1) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0010000010a0300000000000000000002000008a7000600cd2b35589986caa92b94945c6e72a929448865cf226a0cc165943068d1fd59c253202c48d7661341313c17ec3f3b083c26300f708404a3fa4f95c5d613e9e7b288e82fbedc87bbf00ab3bfa5b487c05a75f495349081a5da5cf3c01ca76759e745f59b1b8ab1440b84080f229ec830edd0afa9bbbbdf7b1f95783e2dbbbc3ec606be490364522e50978df917b5b03f4e38a2ac7d4cb230c3f8d6d554e6dcb487961e44000c00044000000000000000040900010073797a3000000000e300060051824dc8221f73009bf1bdc5b6988e0852defb57344fbfbbb5f437d0026e77b2589318ad70453841a117ca2a9f9471115d40170288e6280fe0d875579f6679bd3fb7ef9cda115c750cafd585f2b4481978fa4d7ddd5f1d3a5d08de54c9f8c43b41e62fcf6e4be457aa0988f98c67880505761e799338ed5cd896a47154877c19456105e8b2a298bc0dabdf30e147469977c5a39867f0c8f655845174115f28eb659d39227cbf6785b12f895602601d475eb5e10ddaaec23f4c3787a172aee8685323f133dc1b03862d2fdc4b49496cd79c49c7f82286fe92ca35042d662333000c00044000000000000000050900010073797a3100000000"], 0x1d0}, 0x1, 0x0, 0x0, 0x4088800}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = dup2(r3, r3) socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 57.515000039s ago: executing program 32 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000002000100000004d4008100000015000005000510000000000a004e22fffff800fc0100000000000000000000000000010600000000000000"], 0x70}, 0x1, 0x400000000000000}, 0x0) close_range(0xffffffffffffffff, r4, 0x2) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x242e80, 0x0) pwrite64(r5, 0x0, 0x0, 0x7ffffffffffffffb) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), 0x0) r6 = dup(r1) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0010000010a0300000000000000000002000008a7000600cd2b35589986caa92b94945c6e72a929448865cf226a0cc165943068d1fd59c253202c48d7661341313c17ec3f3b083c26300f708404a3fa4f95c5d613e9e7b288e82fbedc87bbf00ab3bfa5b487c05a75f495349081a5da5cf3c01ca76759e745f59b1b8ab1440b84080f229ec830edd0afa9bbbbdf7b1f95783e2dbbbc3ec606be490364522e50978df917b5b03f4e38a2ac7d4cb230c3f8d6d554e6dcb487961e44000c00044000000000000000040900010073797a3000000000e300060051824dc8221f73009bf1bdc5b6988e0852defb57344fbfbbb5f437d0026e77b2589318ad70453841a117ca2a9f9471115d40170288e6280fe0d875579f6679bd3fb7ef9cda115c750cafd585f2b4481978fa4d7ddd5f1d3a5d08de54c9f8c43b41e62fcf6e4be457aa0988f98c67880505761e799338ed5cd896a47154877c19456105e8b2a298bc0dabdf30e147469977c5a39867f0c8f655845174115f28eb659d39227cbf6785b12f895602601d475eb5e10ddaaec23f4c3787a172aee8685323f133dc1b03862d2fdc4b49496cd79c49c7f82286fe92ca35042d662333000c00044000000000000000050900010073797a3100000000"], 0x1d0}, 0x1, 0x0, 0x0, 0x4088800}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = dup2(r3, r3) socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 17.392032094s ago: executing program 4 (id=296): socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r3, 0x47f6, 0xfa, 0x4, 0x0, 0x0) 16.780303619s ago: executing program 1 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 14.7787071s ago: executing program 4 (id=300): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf2545000000080003", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x20004}, 0x40000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r9, 0x4, 0x2400) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r11, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r11, @ANYRES64], 0x84}}, 0x8800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x3}}) 13.64362391s ago: executing program 4 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000107f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.356484645s ago: executing program 4 (id=303): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 12.977757879s ago: executing program 1 (id=305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) shutdown(r0, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r5}}, 0x30) 12.303176436s ago: executing program 4 (id=306): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000206e2a960c114ca7920100000080000080", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32=r5, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0x20, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) 11.615018672s ago: executing program 3 (id=308): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x0, 0xb, 0x0, 0x5, 0x8, 0xe, 0x4, 0x9, 0x3c, 0x2, 0x2, 0x0, 0x6, 0x9, 0xb, 0x4, 0xc6, 0x98, '\x00', 0xbc, 0x901c835}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000200)='.\x00', 0x0, 0xc0ed0000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) 10.242706651s ago: executing program 4 (id=309): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x18d107) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) 9.648187684s ago: executing program 1 (id=311): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 8.26892022s ago: executing program 1 (id=313): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000009c0)="93", 0x1}], 0x1, 0x6, 0xffff) 5.672279695s ago: executing program 1 (id=318): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000206e2a960c114ca7920100000080000080", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0x20, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) 4.232054083s ago: executing program 1 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.900900625s ago: executing program 3 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r1, 0xee01, 0x0) 3.66675979s ago: executing program 3 (id=323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000107f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.269543053s ago: executing program 2 (id=325): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x100000000, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r2, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000080), 0x1004) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0xffffffff}) 3.268173458s ago: executing program 3 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg(r4, &(0x7f0000001940)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="cd1faf750082fc82d263314ef839049eb79ce41e795886a7e8c2ce603e13dd186b4f34ec76cb1956b35b8ca555413b5d58cc9e36a3e2ae25cf246523cedc5aa5e96516e19517694131d5b0e68489810f637c3c92ac36b4ebb66192790048e49eab746ffd3a5bf0e5bb1635b946e9a65361f15e8901ce2d52d47dbc0e911ab4de66b72b45", 0x84}, {&(0x7f0000000380)="9b179babdb81341160708e3fe31ebed86484d2f5385530cdf75fb6d26363755f83bff33b689fe99469a6f1a3b876e71a1edd6f0797d5ff91533ef05dd8e7f6c00bf9ad12ec7f149365d7ebcc4ba830f2393a5953d08cb3c13ad4df4e76e2cefdc294ef4276b409", 0x67}, {&(0x7f0000000400)="5bb008c8a7cee9240613a2b1dd7991a805716d68e5823b6d0b7d7606da8a5d6bd758252d9f4d5bf8cb5622bf72d5e8f6fd0f8faa5dde78ea5eff127f55121ecadf4334c8ee34bed8a155eff8f80ec9c96d3748f5a3ab298ffd2d5709665281796fd9e20ebe65ca218d68f40c958943379522b2f34e8ff3c3d44d3d6201927b5d513efd94d188a428eaee42daf1f1f2d946d89f3ff07f29e39e3139db67f4a09b16c5d611e02b9be6160f229dffc8776f99b63eed9d0e733d5ea9453d542d79cb03783c4c3a4ba2b42b819b3e1bc5f638b5f00ef5ef900ede2e1abed3d5c84bf209023315f85cf4", 0xe7}, {&(0x7f0000000500)="6fa4bc982a1b6838530f981117f1205cff834410e3156650145b4abcad1a2fe54498cc7ee0481c6d222db6", 0x2b}], 0x4, &(0x7f00000005c0)=[{0x98, 0x114, 0x9, "c9948f100bf49bff9467cf48f0b522174f6cdbfa4953137e7c6e0ab0e54e5a1d204469975eff3078493f732dd905e924e4aabdd21c135c1c6605ace24c933d720506f661c6d066fb42f7c0c3097b5745d7e9f7943ed02ee171c72192258816c0163f6aa77b9a95698efa7fc75045a925764bfd495f92ef8e1822a9bc5852eb7fd80113b6"}, {0xb38, 0x110, 0x3ba, "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"}, {0x88, 0x10d, 0x2, "bf21b7c3145065e4bbf11756eed6dec3cc01eb572effa0c41d9bcd763d898311388213551d01ac29c5b834c5403704121a8eade1202a5b1529e31cb27764440544087beea646d4e2e327333fe60156112ae1b1a3ae7ba8c3cce418ce79e2f8daa3ff440f20eb6f403f8876ae819598d39d94d8"}, {0x10, 0x1, 0x3}, {0xa8, 0x102, 0x6, "768f6897907e85bd406af90a7f7e8ac3105fa5baf417d5f9a93bd2739e442657bf6dd712fe7400c5b639ec8e9e44edb7b12e461a34fa08e07d1386117f760d80f8351699500ae8c228fb4741ff8dd23fec3a84f84bf5f9a011e320dd3fa0c3a850d8601b01056f3c23d4638f302bce682509e97fe7684224987043f25a1eceb4523ac5180f51f47ac9bde8a50003a2ab8770"}, {0x10, 0x84, 0x3}, {0x20, 0x11, 0x1, "232898edfa7328ca8b73"}], 0xd40}, 0x200408c1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.951870252s ago: executing program 2 (id=327): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, 0x0, 0x0, 0x6, 0xffff) 2.130168401s ago: executing program 3 (id=328): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000206e2a960c114ca7920100000080000080", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0x20, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) 756.172503ms ago: executing program 3 (id=329): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0xa940) ioctl$FIBMAP(r0, 0x227f, &(0x7f0000000040)=0x85) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x0) mkdir(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 584.067654ms ago: executing program 2 (id=330): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x0, 0xb, 0x0, 0x5, 0x8, 0xe, 0x4, 0x9, 0x3c, 0x2, 0x2, 0x0, 0x6, 0x9, 0xb, 0x4, 0xc6, 0x98, '\x00', 0xbc, 0x901c835}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000200)='.\x00', 0x0, 0xc0ed0000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) 398.392729ms ago: executing program 2 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x40}}, 0x0) 254.184905ms ago: executing program 2 (id=332): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%-010d \x00'}, 0x20) r4 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x7a7, 0xf38363fd5b181294) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xe, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x6, 0x1, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], &(0x7f0000000500)='syzkaller\x00', 0x2, 0xe, &(0x7f00000007c0)=""/14, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r3, r4, r5, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x5, 0xe, 0xb}, {0x3, 0x2, 0x3, 0xa}], 0x10, 0xc68e}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0xc4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r1}) close(r6) 146.498154ms ago: executing program 5 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x800, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000140)="bb", 0x1, 0x4044804, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x10000, &(0x7f0000000300)='usrquo|a') chdir(&(0x7f0000000140)='./file1\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 49.357220][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.363171][ T5466] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. syzkaller login: [ 68.313291][ T5790] cgroup: Unknown subsys name 'net' [ 68.554242][ T5790] cgroup: Unknown subsys name 'cpuset' [ 68.610107][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.125876][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.366901][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.366959][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.282598][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.284893][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.303206][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.307978][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.308858][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.311019][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.311422][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.312533][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.312652][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.313872][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.330799][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.330799][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.336961][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.340992][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.342063][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.342799][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.347333][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.359772][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.362668][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.363426][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.377590][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.386891][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.389720][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.392606][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.407659][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.157782][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 73.167185][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 73.235878][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 73.314056][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 73.404371][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 73.514233][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.514899][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.515375][ T5803] bridge_slave_0: entered allmulticast mode [ 73.516812][ T5803] bridge_slave_0: entered promiscuous mode [ 73.567836][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.567913][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.568169][ T5800] bridge_slave_0: entered allmulticast mode [ 73.569436][ T5800] bridge_slave_0: entered promiscuous mode [ 73.604278][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.604393][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.604553][ T5803] bridge_slave_1: entered allmulticast mode [ 73.605879][ T5803] bridge_slave_1: entered promiscuous mode [ 73.636778][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.636920][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.637025][ T5800] bridge_slave_1: entered allmulticast mode [ 73.638310][ T5800] bridge_slave_1: entered promiscuous mode [ 73.673659][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.673748][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.673848][ T5802] bridge_slave_0: entered allmulticast mode [ 73.675142][ T5802] bridge_slave_0: entered promiscuous mode [ 73.732866][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.732998][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.733410][ T5802] bridge_slave_1: entered allmulticast mode [ 73.734979][ T5802] bridge_slave_1: entered promiscuous mode [ 73.762665][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.763776][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.764222][ T5804] bridge_slave_0: entered allmulticast mode [ 73.766478][ T5804] bridge_slave_0: entered promiscuous mode [ 73.785076][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.815358][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.815587][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.815695][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.815850][ T5804] bridge_slave_1: entered allmulticast mode [ 73.817578][ T5804] bridge_slave_1: entered promiscuous mode [ 73.824103][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.866765][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.893375][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.893599][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.893766][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.893908][ T5801] bridge_slave_0: entered allmulticast mode [ 73.896246][ T5801] bridge_slave_0: entered promiscuous mode [ 73.948569][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.967264][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.967374][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.967523][ T5801] bridge_slave_1: entered allmulticast mode [ 73.969144][ T5801] bridge_slave_1: entered promiscuous mode [ 73.973911][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.976482][ T5803] team0: Port device team_slave_0 added [ 74.021660][ T5800] team0: Port device team_slave_0 added [ 74.035050][ T5803] team0: Port device team_slave_1 added [ 74.037734][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.393056][ T5800] team0: Port device team_slave_1 added [ 74.409840][ T61] Bluetooth: hci2: command tx timeout [ 74.409846][ T5817] Bluetooth: hci1: command tx timeout [ 74.446783][ T5802] team0: Port device team_slave_0 added [ 74.462669][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.479637][ T5121] Bluetooth: hci4: command tx timeout [ 74.479843][ T61] Bluetooth: hci0: command tx timeout [ 74.479960][ T5817] Bluetooth: hci3: command tx timeout [ 74.489195][ T5802] team0: Port device team_slave_1 added [ 74.511227][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.513721][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.513734][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.513756][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.517526][ T5804] team0: Port device team_slave_0 added [ 74.556059][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.556074][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.556103][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.577802][ T5804] team0: Port device team_slave_1 added [ 74.578744][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.578754][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.578777][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.582583][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.582596][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.582625][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.662723][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.662736][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.662757][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.666458][ T5801] team0: Port device team_slave_0 added [ 74.690223][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.690239][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.690262][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.693797][ T5801] team0: Port device team_slave_1 added [ 74.729805][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.729821][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.729843][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.771526][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.771541][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.771563][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.811672][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.811687][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.811707][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.873633][ T5803] hsr_slave_0: entered promiscuous mode [ 74.875047][ T5803] hsr_slave_1: entered promiscuous mode [ 74.877329][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.877340][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.877363][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.892409][ T5800] hsr_slave_0: entered promiscuous mode [ 74.893909][ T5800] hsr_slave_1: entered promiscuous mode [ 74.894858][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 74.894965][ T5800] Cannot create hsr debugfs directory [ 74.937649][ T5802] hsr_slave_0: entered promiscuous mode [ 74.938820][ T5802] hsr_slave_1: entered promiscuous mode [ 74.942219][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 74.942242][ T5802] Cannot create hsr debugfs directory [ 75.041652][ T5804] hsr_slave_0: entered promiscuous mode [ 75.042397][ T5804] hsr_slave_1: entered promiscuous mode [ 75.042863][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 75.042880][ T5804] Cannot create hsr debugfs directory [ 75.438966][ T5801] hsr_slave_0: entered promiscuous mode [ 75.445528][ T5801] hsr_slave_1: entered promiscuous mode [ 75.446381][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 75.446404][ T5801] Cannot create hsr debugfs directory [ 75.989345][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.020325][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.054920][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.105410][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.227813][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.246629][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.287008][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.340159][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.451022][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.480878][ T5817] Bluetooth: hci1: command tx timeout [ 76.489600][ T5817] Bluetooth: hci2: command tx timeout [ 76.490278][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.537210][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.559751][ T5121] Bluetooth: hci4: command tx timeout [ 76.559831][ T61] Bluetooth: hci0: command tx timeout [ 76.559897][ T5817] Bluetooth: hci3: command tx timeout [ 76.591326][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.711423][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.748704][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.778961][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.828104][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.959621][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.960184][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.018866][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.059108][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.097966][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.176990][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.188465][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.222342][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.222531][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.257648][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.257880][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.289219][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.322492][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.322564][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.336574][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.367444][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.367561][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.426981][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.457651][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.457768][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.479206][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.504138][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.504250][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.615657][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.643827][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.643898][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.647394][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.700518][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.700588][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.794616][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.826606][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.826862][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.866430][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.880405][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.966638][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.167056][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.281313][ T5803] veth0_vlan: entered promiscuous mode [ 78.329012][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.361234][ T5803] veth1_vlan: entered promiscuous mode [ 78.433007][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.475945][ T5800] veth0_vlan: entered promiscuous mode [ 78.514860][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.515517][ T5803] veth0_macvtap: entered promiscuous mode [ 78.518547][ T5800] veth1_vlan: entered promiscuous mode [ 78.565137][ T5817] Bluetooth: hci2: command tx timeout [ 78.565168][ T5817] Bluetooth: hci1: command tx timeout [ 78.571402][ T5803] veth1_macvtap: entered promiscuous mode [ 78.584471][ T5802] veth0_vlan: entered promiscuous mode [ 78.637851][ T5802] veth1_vlan: entered promiscuous mode [ 78.640131][ T61] Bluetooth: hci3: command tx timeout [ 78.640156][ T61] Bluetooth: hci0: command tx timeout [ 78.640175][ T61] Bluetooth: hci4: command tx timeout [ 78.673462][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.686965][ T5804] veth0_vlan: entered promiscuous mode [ 78.702974][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.751698][ T5800] veth0_macvtap: entered promiscuous mode [ 78.754887][ T5804] veth1_vlan: entered promiscuous mode [ 78.756511][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.768976][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.773655][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.778106][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.782045][ T5800] veth1_macvtap: entered promiscuous mode [ 78.862753][ T5802] veth0_macvtap: entered promiscuous mode [ 78.904862][ T5802] veth1_macvtap: entered promiscuous mode [ 78.924088][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.002205][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.023996][ T5804] veth0_macvtap: entered promiscuous mode [ 79.055722][ T1020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.070841][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.070930][ T1020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.073769][ T5804] veth1_macvtap: entered promiscuous mode [ 79.078345][ T1020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.122759][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.122783][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.126388][ T1020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151698][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.231136][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.266756][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.303481][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.303501][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.306395][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.334635][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.334972][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.472815][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.498830][ T5801] veth0_vlan: entered promiscuous mode [ 79.571971][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588754][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.593728][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.593747][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.636922][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.677099][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701233][ T5801] veth1_vlan: entered promiscuous mode [ 79.854141][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.854161][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.960439][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.960457][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.055783][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.055802][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.111344][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.111363][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.149726][ T5814] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 80.196387][ T5801] veth0_macvtap: entered promiscuous mode [ 80.212424][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.212444][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.233418][ T5801] veth1_macvtap: entered promiscuous mode [ 80.309635][ T5814] usb 3-1: device descriptor read/64, error -71 [ 80.338545][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.360082][ T5926] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 80.365169][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.372389][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.420630][ T1525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.439196][ T1525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.449717][ T1525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.469766][ T1525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.581168][ T5814] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 80.640346][ T61] Bluetooth: hci2: command tx timeout [ 80.640390][ T5817] Bluetooth: hci1: command tx timeout [ 80.709694][ T5814] usb 3-1: device descriptor read/64, error -71 [ 80.719704][ T61] Bluetooth: hci0: command tx timeout [ 80.719730][ T61] Bluetooth: hci3: command tx timeout [ 80.719775][ T5817] Bluetooth: hci4: command tx timeout [ 80.839074][ T5814] usb usb3-port1: attempt power cycle [ 80.981288][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.011968][ T5936] Zero length message leads to an empty skb [ 81.018453][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.018474][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.054826][ T5814] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 82.071230][ T5814] usb 3-1: device descriptor read/8, error -71 [ 82.077633][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.077652][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.165079][ T9] cfg80211: failed to load regulatory.db [ 82.601030][ T5814] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 82.660554][ T5814] usb 3-1: device descriptor read/8, error -71 [ 82.772464][ T5814] usb usb3-port1: unable to enumerate USB device [ 83.379276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.579942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 84.819609][ T5814] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.981231][ T5814] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 84.981258][ T5814] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 84.981276][ T5814] usb 5-1: config 220 has no interface number 2 [ 84.981389][ T5814] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 84.981415][ T5814] usb 5-1: config 220 interface 0 has no altsetting 0 [ 84.981432][ T5814] usb 5-1: config 220 interface 76 has no altsetting 0 [ 84.981448][ T5814] usb 5-1: config 220 interface 1 has no altsetting 0 [ 84.985609][ T5814] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 84.985636][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.985654][ T5814] usb 5-1: Product: syz [ 84.985667][ T5814] usb 5-1: Manufacturer: syz [ 84.985680][ T5814] usb 5-1: SerialNumber: syz [ 86.948919][ T5995] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 86.948968][ T5995] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.949425][ T5995] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 86.949495][ T5995] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 87.490901][ T5814] usb 5-1: selecting invalid altsetting 0 [ 87.492397][ T5814] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 87.492432][ T5814] uvcvideo 5-1:220.0: No valid video chain found. [ 87.563488][ T5814] usb 5-1: selecting invalid altsetting 0 [ 87.563525][ T5814] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 87.601109][ T5814] usb 5-1: USB disconnect, device number 2 [ 87.620214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.389506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.816395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.876469][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 90.092187][ T5807] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.601690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.721514][ T5807] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.721541][ T5807] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.859470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.941757][ T5807] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.941787][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.941806][ T5807] usb 1-1: SerialNumber: syz [ 91.070626][ T6035] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 91.070651][ T6035] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 91.070750][ T6035] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 91.070768][ T6035] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 91.532371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.533192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.533346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.589789][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.730964][ T5807] usb 1-1: 0:2 : does not exist [ 91.733222][ T5807] usb 1-1: unit 255 not found! [ 91.762261][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.762288][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.762305][ T10] usb 3-1: config 220 has no interface number 2 [ 91.762378][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.762403][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 91.762420][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 91.762437][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 91.781272][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.781299][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.781318][ T10] usb 3-1: Product: syz [ 91.781375][ T10] usb 3-1: Manufacturer: syz [ 91.781390][ T10] usb 3-1: SerialNumber: syz [ 91.998636][ T5807] usb 1-1: USB disconnect, device number 2 [ 92.050233][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.722716][ T10] usb 3-1: selecting invalid altsetting 0 [ 92.723152][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 92.723181][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 92.757218][ T10] usb 3-1: selecting invalid altsetting 0 [ 92.757255][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 92.786355][ T10] usb 3-1: USB disconnect, device number 6 [ 96.007893][ T6089] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 104.199615][ T5986] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.389570][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 104.391808][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.391837][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.391873][ T5986] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.391894][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.413986][ T5986] usb 5-1: config 0 descriptor?? [ 104.422333][ T5986] hub 5-1:0.0: USB hub found [ 104.650741][ T5986] hub 5-1:0.0: 1 port detected [ 105.814944][ T5986] hub 5-1:0.0: activate --> -90 [ 106.242328][ T5986] usb 5-1-port1: cannot disable (err = -71) [ 106.246245][ T5986] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 106.246320][ T5986] usb 5-1-port1: connect-debounce failed [ 106.282532][ T5807] usb 5-1: USB disconnect, device number 3 [ 106.469622][ T1239] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 106.549604][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.622961][ T1239] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.622989][ T1239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.623008][ T1239] usb 2-1: config 0 has no interface number 0 [ 106.623053][ T1239] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 106.623074][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.696263][ T1239] usb 2-1: config 0 descriptor?? [ 106.722399][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 106.722427][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 106.722446][ T10] usb 1-1: config 220 has no interface number 2 [ 106.722512][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 106.722538][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 106.722555][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 106.722572][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 106.727216][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.727243][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.727261][ T10] usb 1-1: Product: syz [ 106.727273][ T10] usb 1-1: Manufacturer: syz [ 106.727286][ T10] usb 1-1: SerialNumber: syz [ 108.349736][ T1239] ldusb 2-1:0.55: Interrupt in endpoint not found [ 108.392867][ T1239] usb 2-1: USB disconnect, device number 2 [ 108.920586][ T10] usb 1-1: selecting invalid altsetting 0 [ 108.937395][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 108.937426][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 108.974859][ T10] usb 1-1: selecting invalid altsetting 0 [ 108.974896][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 109.429710][ T10] usb 1-1: USB disconnect, device number 3 [ 112.340719][ T6230] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 112.340740][ T6230] netlink: 'syz.2.89': attribute type 4 has an invalid length. [ 112.340752][ T6230] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.89'. [ 112.346864][ T6230] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 112.346883][ T6230] netlink: 'syz.2.89': attribute type 4 has an invalid length. [ 112.346895][ T6230] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.89'. [ 112.793179][ T56] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 113.229707][ T5986] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.230049][ T5807] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.251609][ T56] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.251634][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.251651][ T56] usb 3-1: config 0 has no interface number 0 [ 113.251693][ T56] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.251704][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.316654][ T56] usb 3-1: config 0 descriptor?? [ 113.342433][ T56] ldusb 3-1:0.55: Interrupt in endpoint not found [ 113.389549][ T5986] usb 4-1: Using ep0 maxpacket: 16 [ 113.405067][ T5986] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.405087][ T5986] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.405107][ T5986] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.405118][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.419521][ T5807] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.419548][ T5807] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.419565][ T5807] usb 2-1: config 220 has no interface number 2 [ 113.419658][ T5807] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.419671][ T5807] usb 2-1: config 220 interface 0 has no altsetting 0 [ 113.419680][ T5807] usb 2-1: config 220 interface 76 has no altsetting 0 [ 113.419689][ T5807] usb 2-1: config 220 interface 1 has no altsetting 0 [ 113.519703][ T5807] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.519731][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.519750][ T5807] usb 2-1: Product: syz [ 113.519763][ T5807] usb 2-1: Manufacturer: syz [ 113.519776][ T5807] usb 2-1: SerialNumber: syz [ 113.565947][ T10] usb 3-1: USB disconnect, device number 7 [ 114.265792][ T5986] usbhid 4-1:128.0: can't add hid device: -71 [ 114.265912][ T5986] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 114.395304][ T5986] usb 4-1: USB disconnect, device number 2 [ 114.399981][ T5807] usb 2-1: selecting invalid altsetting 0 [ 114.400381][ T5807] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 114.400408][ T5807] uvcvideo 2-1:220.0: No valid video chain found. [ 114.467343][ T5807] usb 2-1: selecting invalid altsetting 0 [ 114.467381][ T5807] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 114.487739][ T5807] usb 2-1: USB disconnect, device number 3 [ 115.719794][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.879613][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 115.882837][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.882866][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.882903][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 115.882924][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.887786][ T10] usb 4-1: config 0 descriptor?? [ 115.959546][ T5986] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.117975][ T5986] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 116.118004][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.118022][ T5986] usb 2-1: Product: syz [ 116.118035][ T5986] usb 2-1: Manufacturer: syz [ 116.118047][ T5986] usb 2-1: SerialNumber: syz [ 116.165116][ T5986] usb 2-1: config 0 descriptor?? [ 116.217957][ T5817] Bluetooth: hci5: urb ffff888030bcd500 submission failed (2) [ 116.342834][ T10] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 116.342874][ T10] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 116.440137][ T6296] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 116.440295][ T6296] netlink: 'syz.4.102': attribute type 4 has an invalid length. [ 116.440454][ T6296] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.102'. [ 116.442053][ T6296] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 116.442206][ T6296] netlink: 'syz.4.102': attribute type 4 has an invalid length. [ 116.442369][ T6296] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.102'. [ 116.550932][ T10] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 116.769579][ T10] ft260 0003:0403:6030.0001: failed to retrieve system status [ 116.770000][ T10] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -5 [ 116.966280][ T6300] netlink: 56 bytes leftover after parsing attributes in process `syz.1.100'. [ 118.311808][ T5909] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 118.409389][ T10] usb 4-1: USB disconnect, device number 3 [ 118.584862][ T5909] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.584880][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.584889][ T5909] usb 3-1: config 0 has no interface number 0 [ 118.584915][ T5909] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.584927][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.587651][ T5909] usb 3-1: config 0 descriptor?? [ 118.594795][ T5909] ldusb 3-1:0.55: Interrupt in endpoint not found [ 119.437701][ T10] usb 3-1: USB disconnect, device number 8 [ 119.832443][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 119.959896][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.939380][ T56] usb 4-1: Using ep0 maxpacket: 16 [ 120.950180][ T56] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.950211][ T56] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.950247][ T56] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.950268][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.460812][ T56] usbhid 4-1:128.0: can't add hid device: -71 [ 121.460888][ T56] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 121.507024][ T56] usb 4-1: USB disconnect, device number 4 [ 121.842567][ T10] usb 2-1: USB disconnect, device number 4 [ 122.490803][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.663973][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.664000][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.665309][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.665335][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.665353][ T10] usb 4-1: SerialNumber: syz [ 122.933808][ T10] usb 4-1: 0:2 : does not exist [ 122.933857][ T10] usb 4-1: unit 5 not found! [ 122.994723][ T10] usb 4-1: USB disconnect, device number 5 [ 123.593482][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.671711][ T6371] 9p: Bad value for 'rfdno' [ 123.884358][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 125.438907][ T6393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.559596][ T5986] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.029566][ T5986] usb 4-1: Using ep0 maxpacket: 16 [ 126.049356][ T5986] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.049389][ T5986] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.071876][ T5986] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.071902][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.572854][ T5986] usbhid 4-1:128.0: can't add hid device: -71 [ 126.572927][ T5986] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 126.620705][ T5986] usb 4-1: USB disconnect, device number 6 [ 128.021543][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.812407][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.812424][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.814964][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.814982][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.814991][ T10] usb 5-1: SerialNumber: syz [ 129.202614][ T10] usb 5-1: 0:2 : does not exist [ 129.202663][ T10] usb 5-1: unit 5 not found! [ 129.302841][ T10] usb 5-1: USB disconnect, device number 4 [ 129.568186][ T6442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.628203][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.311281][ T6463] overlayfs: failed to resolve './file0': -2 [ 132.479642][ T1239] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 132.564221][ T6466] veth0: entered promiscuous mode [ 132.565441][ T6467] veth0: left promiscuous mode [ 132.725236][ T1239] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.725264][ T1239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.725280][ T1239] usb 2-1: config 0 has no interface number 0 [ 132.725323][ T1239] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.725342][ T1239] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.725381][ T1239] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.725400][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.731521][ T1239] usb 2-1: config 0 descriptor?? [ 132.749208][ T1239] ldusb 2-1:0.55: Interrupt in endpoint not found [ 132.775773][ T5909] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.809101][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.809164][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204840][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 133.331963][ T5909] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.331997][ T5909] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.332034][ T5909] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.332057][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.400408][ T56] usb 2-1: USB disconnect, device number 5 [ 133.810386][ T5909] usbhid 4-1:128.0: can't add hid device: -71 [ 133.810684][ T5909] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 133.869676][ T5909] usb 4-1: USB disconnect, device number 7 [ 135.327551][ T6498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.341689][ T6518] overlayfs: failed to resolve './file0': -2 [ 140.235530][ T5986] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.073624][ T6555] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 141.099538][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 141.111534][ T5986] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.111564][ T5986] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.111599][ T5986] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.111619][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.579859][ T6561] overlayfs: failed to resolve './file0': -2 [ 142.445930][ T5986] usbhid 2-1:128.0: can't add hid device: -71 [ 142.446000][ T5986] usbhid 2-1:128.0: probe with driver usbhid failed with error -71 [ 142.500256][ T5986] usb 2-1: USB disconnect, device number 6 [ 143.403548][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.425665][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.429651][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.451583][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.452326][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.213149][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 145.250997][ T6609] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.523683][ T5817] Bluetooth: hci5: command tx timeout [ 146.159645][ T808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.313756][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 146.316260][ T808] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.316292][ T808] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.316329][ T808] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.316352][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.359177][ T6630] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.359202][ T6630] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 146.361468][ T6630] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.361492][ T6630] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 146.801161][ T808] usbhid 3-1:128.0: can't add hid device: -71 [ 146.801270][ T808] usbhid 3-1:128.0: probe with driver usbhid failed with error -71 [ 146.829516][ T808] usb 3-1: USB disconnect, device number 9 [ 147.613685][ T5817] Bluetooth: hci5: command tx timeout [ 147.912340][ T6635] syzkaller0: entered promiscuous mode [ 147.912365][ T6635] syzkaller0: entered allmulticast mode [ 148.025388][ T6661] overlayfs: failed to resolve './file0': -2 [ 148.403461][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 148.657075][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 148.693875][ T6673] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.020857][ T1179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.412046][ T1239] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.451334][ T1179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.461715][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.575053][ T1239] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.575082][ T1239] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.575101][ T1239] usb 2-1: config 220 has no interface number 2 [ 149.575170][ T1239] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.575195][ T1239] usb 2-1: config 220 interface 0 has no altsetting 0 [ 149.575212][ T1239] usb 2-1: config 220 interface 76 has no altsetting 0 [ 149.575228][ T1239] usb 2-1: config 220 interface 1 has no altsetting 0 [ 149.578950][ T1239] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.578979][ T1239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.578999][ T1239] usb 2-1: Product: syz [ 149.579021][ T1239] usb 2-1: Manufacturer: syz [ 149.579034][ T1239] usb 2-1: SerialNumber: syz [ 149.727668][ T5817] Bluetooth: hci5: command tx timeout [ 149.731906][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 149.777636][ T9] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.777882][ T9] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.777921][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.777942][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.902272][ T1239] usb 2-1: selecting invalid altsetting 0 [ 149.924508][ T1239] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 149.924540][ T1239] uvcvideo 2-1:220.0: No valid video chain found. [ 150.001723][ T1239] usb 2-1: selecting invalid altsetting 0 [ 150.002378][ T1239] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 150.068840][ T1239] usb 2-1: USB disconnect, device number 7 [ 150.251852][ T9] usbhid 5-1:128.0: can't add hid device: -71 [ 150.251932][ T9] usbhid 5-1:128.0: probe with driver usbhid failed with error -71 [ 150.263639][ T9] usb 5-1: USB disconnect, device number 5 [ 150.265639][ T1179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.845815][ T5817] Bluetooth: hci5: command tx timeout [ 152.065853][ T1179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.119365][ T6736] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 152.228430][ T6716] syzkaller0: entered promiscuous mode [ 152.228456][ T6716] syzkaller0: entered allmulticast mode [ 152.248258][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.248323][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.248460][ T6588] bridge_slave_0: entered allmulticast mode [ 152.284222][ T6588] bridge_slave_0: entered promiscuous mode [ 152.313748][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.313869][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.314087][ T6588] bridge_slave_1: entered allmulticast mode [ 152.329593][ T6588] bridge_slave_1: entered promiscuous mode [ 152.734448][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 152.827068][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.851801][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.136569][ T6588] team0: Port device team_slave_0 added [ 154.006489][ T6588] team0: Port device team_slave_1 added [ 154.433396][ T6780] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.774780][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.774796][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.774819][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.830294][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.830310][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.830333][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.832800][ T1179] bridge_slave_1: left allmulticast mode [ 154.832932][ T1179] bridge_slave_1: left promiscuous mode [ 154.835058][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.027441][ T1179] bridge_slave_0: left allmulticast mode [ 155.027467][ T1179] bridge_slave_0: left promiscuous mode [ 155.027695][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.955704][ T6822] kvm: emulating exchange as write [ 158.745293][ T6852] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 158.772398][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 161.523768][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.580099][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.623890][ T1179] bond0 (unregistering): Released all slaves [ 161.667056][ T6799] syzkaller0: entered promiscuous mode [ 161.667080][ T6799] syzkaller0: entered allmulticast mode [ 163.070593][ T6903] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 163.547232][ T6588] hsr_slave_0: entered promiscuous mode [ 163.548480][ T6588] hsr_slave_1: entered promiscuous mode [ 163.572751][ T6588] debugfs: 'hsr0' already exists in 'hsr' [ 163.572777][ T6588] Cannot create hsr debugfs directory [ 166.601634][ T1179] hsr_slave_0: left promiscuous mode [ 166.658634][ T1179] hsr_slave_1: left promiscuous mode [ 166.667498][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.667590][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.703326][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.703345][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.485420][ T1179] veth1_macvtap: left promiscuous mode [ 167.485683][ T1179] veth0_macvtap: left promiscuous mode [ 167.485960][ T1179] veth1_vlan: left promiscuous mode [ 167.492382][ T1179] veth0_vlan: left promiscuous mode [ 167.514901][ T808] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.589609][ T5807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.662001][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 167.665905][ T808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.665952][ T808] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 167.718360][ T808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.718390][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.718408][ T808] usb 4-1: Product: syz [ 167.718421][ T808] usb 4-1: Manufacturer: syz [ 167.718435][ T808] usb 4-1: SerialNumber: syz [ 167.795294][ T5807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.795319][ T5807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.821803][ T5807] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.821821][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.821831][ T5807] usb 3-1: SerialNumber: syz [ 168.005473][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.007884][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.076458][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.076934][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.161496][ T5807] usb 3-1: 0:2 : does not exist [ 168.161584][ T5807] usb 3-1: unit 5: unexpected type 0x03 [ 168.161647][ T5807] usb 3-1: unit 255 not found! [ 168.229097][ T808] cdc_ncm 4-1:1.0: bind() failure [ 168.255279][ T808] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 168.255324][ T808] cdc_ncm 4-1:1.1: bind() failure [ 168.274114][ T5807] usb 3-1: USB disconnect, device number 10 [ 168.290659][ T808] usb 4-1: USB disconnect, device number 8 [ 168.389054][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.561169][ T1239] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.709597][ T1239] usb 5-1: Using ep0 maxpacket: 16 [ 168.759611][ T1239] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.759631][ T1239] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.759659][ T1239] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.759680][ T1239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.038996][ T6973] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 171.268144][ T1239] usbhid 5-1:128.0: can't add hid device: -71 [ 171.268298][ T1239] usbhid 5-1:128.0: probe with driver usbhid failed with error -71 [ 171.309751][ T1239] usb 5-1: USB disconnect, device number 6 [ 172.109603][ T1239] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 172.302062][ T1239] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.302089][ T1239] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 172.302106][ T1239] usb 3-1: config 220 has no interface number 2 [ 172.302168][ T1239] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.302190][ T1239] usb 3-1: config 220 interface 0 has no altsetting 0 [ 172.302204][ T1239] usb 3-1: config 220 interface 76 has no altsetting 0 [ 172.302221][ T1239] usb 3-1: config 220 interface 1 has no altsetting 0 [ 172.350657][ T1239] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.350686][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.350704][ T1239] usb 3-1: Product: syz [ 172.350717][ T1239] usb 3-1: Manufacturer: syz [ 172.350729][ T1239] usb 3-1: SerialNumber: syz [ 172.755582][ T1239] usb 3-1: selecting invalid altsetting 0 [ 172.755910][ T1239] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 172.755938][ T1239] uvcvideo 3-1:220.0: No valid video chain found. [ 172.895181][ T6995] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.895231][ T6995] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 172.898888][ T6995] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.898932][ T6995] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 173.561578][ T1239] usb 3-1: selecting invalid altsetting 0 [ 173.561615][ T1239] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 173.568104][ T1239] usb 3-1: USB disconnect, device number 11 [ 174.129574][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.284400][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.284426][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.285650][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.285675][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.285687][ T10] usb 5-1: SerialNumber: syz [ 174.389561][ T1239] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.861994][ T10] usb 5-1: 0:2 : does not exist [ 174.862041][ T10] usb 5-1: unit 5: unexpected type 0x03 [ 174.862050][ T10] usb 5-1: unit 255 not found! [ 174.940311][ T1239] usb 3-1: Using ep0 maxpacket: 8 [ 174.967869][ T10] usb 5-1: USB disconnect, device number 7 [ 174.968556][ T1239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.968581][ T1239] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 174.988073][ T1239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.988101][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.988119][ T1239] usb 3-1: Product: syz [ 174.988131][ T1239] usb 3-1: Manufacturer: syz [ 174.988143][ T1239] usb 3-1: SerialNumber: syz [ 175.164465][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.258766][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.259239][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.359640][ T1239] cdc_ncm 3-1:1.0: bind() failure [ 175.364246][ T1239] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 175.364272][ T1239] cdc_ncm 3-1:1.1: bind() failure [ 175.450880][ T1239] usb 3-1: USB disconnect, device number 12 [ 178.938440][ T5807] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.008659][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 179.129732][ T5807] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 179.129787][ T5807] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 179.129798][ T5807] usb 4-1: config 220 has no interface number 2 [ 179.129837][ T5807] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 179.129851][ T5807] usb 4-1: config 220 interface 0 has no altsetting 0 [ 179.129860][ T5807] usb 4-1: config 220 interface 76 has no altsetting 0 [ 179.129869][ T5807] usb 4-1: config 220 interface 1 has no altsetting 0 [ 179.132045][ T5807] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 179.132070][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.132088][ T5807] usb 4-1: Product: syz [ 179.132100][ T5807] usb 4-1: Manufacturer: syz [ 179.132113][ T5807] usb 4-1: SerialNumber: syz [ 179.307618][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 179.312111][ T7045] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 179.469989][ T5807] usb 4-1: selecting invalid altsetting 0 [ 179.470325][ T5807] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 179.470353][ T5807] uvcvideo 4-1:220.0: No valid video chain found. [ 179.541933][ T5807] usb 4-1: selecting invalid altsetting 0 [ 179.541963][ T5807] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 179.545223][ T5807] usb 4-1: USB disconnect, device number 9 [ 179.592218][ T5854] udevd[5854]: setting owner of /dev/bus/usb/004/009 to uid=0, gid=0 failed: No such file or directory [ 180.291421][ T1239] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 181.248993][ T1239] usb 3-1: Using ep0 maxpacket: 8 [ 181.257320][ T1239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.257367][ T1239] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 181.283430][ T1239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.283460][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.283478][ T1239] usb 3-1: Product: syz [ 181.283492][ T1239] usb 3-1: Manufacturer: syz [ 181.283505][ T1239] usb 3-1: SerialNumber: syz [ 181.748314][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.748726][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.857630][ T1239] cdc_ncm 3-1:1.0: bind() failure [ 181.958091][ T1239] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 181.958144][ T1239] cdc_ncm 3-1:1.1: bind() failure [ 182.479623][ T1239] usb 3-1: USB disconnect, device number 13 [ 184.279605][ T5807] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.440371][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 184.441786][ T5807] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.441804][ T5807] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.441824][ T5807] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.441835][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.673761][ T6588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.810265][ T6588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.886354][ T5807] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 184.886388][ T5807] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 184.886411][ T5807] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 184.886433][ T5807] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 184.886455][ T5807] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 184.887717][ T5807] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 184.888813][ T6588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.015874][ T6588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.130003][ T5807] usb 3-1: USB disconnect, device number 14 [ 185.369232][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 186.838062][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.885742][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.904393][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.904591][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.934341][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.934471][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.452785][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 192.078158][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.189680][ T5807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.392182][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 192.394948][ T5807] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.394979][ T5807] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.395015][ T5807] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.395037][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.907284][ T5807] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 192.907320][ T5807] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 192.907345][ T5807] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 192.907368][ T5807] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 192.907391][ T5807] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 192.908230][ T5807] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 193.092036][ T6588] veth0_vlan: entered promiscuous mode [ 194.035785][ T6588] veth1_vlan: entered promiscuous mode [ 194.105872][ T5807] usb 2-1: USB disconnect, device number 8 [ 194.224165][ T6588] veth0_macvtap: entered promiscuous mode [ 194.243293][ T6588] veth1_macvtap: entered promiscuous mode [ 194.254471][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.254543][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.359347][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.427554][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.828339][ T1020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.856998][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.910303][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.946905][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.329471][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 196.330351][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 196.330380][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 196.330402][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 196.832747][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.832768][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.491264][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.491284][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.024630][ T13] ------------[ cut here ]------------ [ 200.024644][ T13] in_task() && kcov_mode_enabled(mode) [ 200.024658][ T13] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:1/13 [ 200.024711][ T13] Modules linked in: [ 200.024752][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 200.024780][ T13] Tainted: [L]=SOFTLOCKUP [ 200.024787][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.024804][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 200.024834][ T13] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 200.024863][ T13] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 200.024882][ T13] RSP: 0018:ffffc90000127978 EFLAGS: 00010202 [ 200.024899][ T13] RAX: 0000000000000002 RBX: ffff88801c6e0000 RCX: 0000000000000000 [ 200.024913][ T13] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 200.024927][ T13] RBP: ffff8880344fec80 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 200.024942][ T13] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff888033a4dd08 [ 200.024957][ T13] R13: ffff88802f7e07c0 R14: 0000000000000000 R15: ffff888033a4dd20 [ 200.024971][ T13] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 200.024987][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.025001][ T13] CR2: 00007f0bb20756b8 CR3: 00000000548cc000 CR4: 00000000003526f0 [ 200.025018][ T13] Call Trace: [ 200.025025][ T13] [ 200.025042][ T13] ieee80211_iface_work+0x211/0x12b0 [ 200.025077][ T13] cfg80211_wiphy_work+0x2ab/0x450 [ 200.025102][ T13] ? process_scheduled_works+0xa0f/0x17a0 [ 200.025124][ T13] process_scheduled_works+0xaec/0x17a0 [ 200.025171][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.025189][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.025219][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.025245][ T13] ? schedule+0x90/0x360 [ 200.025278][ T13] worker_thread+0xda6/0x1360 [ 200.025323][ T13] kthread+0x726/0x8b0 [ 200.025349][ T13] ? __pfx_worker_thread+0x10/0x10 [ 200.025368][ T13] ? __pfx_kthread+0x10/0x10 [ 200.025388][ T13] ? rt_spin_unlock+0x14f/0x200 [ 200.025413][ T13] ? rt_spin_unlock+0x160/0x200 [ 200.025432][ T13] ? __pfx_kthread+0x10/0x10 [ 200.025454][ T13] ret_from_fork+0x51b/0xa40 [ 200.025478][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 200.025496][ T13] ? __switch_to+0xc82/0x1410 [ 200.025527][ T13] ? __pfx_kthread+0x10/0x10 [ 200.025551][ T13] ret_from_fork_asm+0x1a/0x30 [ 200.025601][ T13] [ 200.025612][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.025629][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 200.025656][ T13] Tainted: [L]=SOFTLOCKUP [ 200.025663][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.025676][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 200.025698][ T13] Call Trace: [ 200.025706][ T13] [ 200.025714][ T13] vpanic+0x1e0/0x670 [ 200.025745][ T13] panic+0xc5/0xd0 [ 200.025770][ T13] ? __pfx_panic+0x10/0x10 [ 200.025804][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 200.025837][ T13] __warn+0x315/0x4a0 [ 200.025861][ T13] ? kcov_remote_start+0x5d8/0x710 [ 200.025888][ T13] ? kcov_remote_start+0x5d8/0x710 [ 200.025914][ T13] __report_bug+0x29a/0x540 [ 200.025944][ T13] ? kcov_remote_start+0x5d8/0x710 [ 200.025970][ T13] ? __pfx___report_bug+0x10/0x10 [ 200.025995][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.026023][ T13] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 200.026049][ T13] ? rt_spin_lock+0x1e0/0x400 [ 200.026070][ T13] ? rt_spin_lock+0x1e0/0x400 [ 200.026091][ T13] ? kcov_remote_start+0x5d8/0x710 [ 200.026115][ T13] report_bug+0x16a/0x220 [ 200.026139][ T13] ? kcov_remote_start+0x5d8/0x710 [ 200.026162][ T13] ? kcov_remote_start+0x5da/0x710 [ 200.026186][ T13] handle_bug+0x98/0x200 [ 200.026215][ T13] exc_invalid_op+0x1a/0x50 [ 200.026249][ T13] asm_exc_invalid_op+0x1a/0x20 [ 200.026268][ T13] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 200.026293][ T13] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 200.026310][ T13] RSP: 0018:ffffc90000127978 EFLAGS: 00010202 [ 200.026325][ T13] RAX: 0000000000000002 RBX: ffff88801c6e0000 RCX: 0000000000000000 [ 200.026335][ T13] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 200.026348][ T13] RBP: ffff8880344fec80 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 200.026364][ T13] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff888033a4dd08 [ 200.026380][ T13] R13: ffff88802f7e07c0 R14: 0000000000000000 R15: ffff888033a4dd20 [ 200.026401][ T13] ? rt_spin_lock+0x1e0/0x400 [ 200.026430][ T13] ? kcov_remote_start+0xe0/0x710 [ 200.026459][ T13] ieee80211_iface_work+0x211/0x12b0 [ 200.026494][ T13] cfg80211_wiphy_work+0x2ab/0x450 [ 200.026518][ T13] ? process_scheduled_works+0xa0f/0x17a0 [ 200.026540][ T13] process_scheduled_works+0xaec/0x17a0 [ 200.026607][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.026624][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.026655][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.026681][ T13] ? schedule+0x90/0x360 [ 200.026713][ T13] worker_thread+0xda6/0x1360 [ 200.026759][ T13] kthread+0x726/0x8b0 [ 200.026785][ T13] ? __pfx_worker_thread+0x10/0x10 [ 200.026805][ T13] ? __pfx_kthread+0x10/0x10 [ 200.026825][ T13] ? rt_spin_unlock+0x14f/0x200 [ 200.026850][ T13] ? rt_spin_unlock+0x160/0x200 [ 200.026868][ T13] ? __pfx_kthread+0x10/0x10 [ 200.026892][ T13] ret_from_fork+0x51b/0xa40 [ 200.026916][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 200.026934][ T13] ? __switch_to+0xc82/0x1410 [ 200.026965][ T13] ? __pfx_kthread+0x10/0x10 [ 200.026989][ T13] ret_from_fork_asm+0x1a/0x30 [ 200.027032][ T13] [ 200.027483][ T13] Kernel Offset: disabled