last executing test programs: 3.002419983s ago: executing program 3 (id=4): add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="620f4037db465760813cb616ad72b1ef624ae8d1e68f8e3d7878188c8d0d169fbfb49667770e9711e5db4e00435e1af7", 0x30, 0xfffffffffffffffd) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303a5"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000340)='mnt/ttyUSB0\x00', 0x44002, 0x0) 2.019989296s ago: executing program 0 (id=1): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000440)="a8738151e6", 0x5}, {&(0x7f0000000280)="c021d45a3b1e", 0x6}], 0x2) 1.652521244s ago: executing program 0 (id=9): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={@multicast2, @local}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/3\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x1a, 0x1, 0x70bd28, 0x4, {0x2}, [@typed={0x8, 0x130, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, 0x1c}}, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.168550413s ago: executing program 3 (id=10): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000200), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 1.068630357s ago: executing program 3 (id=11): r0 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0xefe, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r0, 0xffff, 0x6c, &(0x7f0000000680)={0x6c, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}, {}, {}, {0x0, 0x40}}}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(0x0, 0x0) r2 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r0, 0x2) syz_ublk_setup_queues(r2, r1, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000021c0)={'syz0\x00', {}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0xdd, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff], [0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x401, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x80000, 0x0, 0x180d, 0x9, 0xae4d, 0x2, 0x0, 0x3, 0x0, 0x0, 0x4, 0xcf3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10000000, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000, 0x20000], [0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x2, 0x0, 0x83e8, 0xfffffffd, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x2]}, 0x45c) add_key(&(0x7f0000002680)='keyring\x00', &(0x7f00000026c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r3, &(0x7f0000000140)='S', 0x1, 0xc000, 0x0, 0x0) close(r3) r4 = syz_open_dev$sndctrl(&(0x7f0000002cc0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x4, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000002d40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000002d80)=0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0) timer_settime(r7, 0x0, &(0x7f0000002dc0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e80)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012"], 0x50}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000002ec0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.066838677s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0xfff2, 0xffff}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) 1.027056516s ago: executing program 4 (id=5): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001580), 0x1c0002, 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)='trylock ', 0x8}], 0x1, 0x8, 0x8, 0x1) 881.499813ms ago: executing program 1 (id=13): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x7, 0x4}) 863.414596ms ago: executing program 4 (id=14): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000f8dc3b219a1499fc377154e5e727d065d91869daddff81003900000d010000c036030000166311dc5046077b049f230f7b932bd9e252e4567ff0bcce236e6978587d09940316df2aadeff2549c6d093c920b70d903b49226d993b8b1"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x402) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xf) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000100)={0x1, 0x1, 0x5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @empty}], 0x10) openat(0xffffffffffffffff, &(0x7f0000000780)='auth.unix.ip/channel\x00', 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2b420020}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x89}, 0x20004041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040008) 728.61017ms ago: executing program 2 (id=15): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffa, 0x6, 0x0, 'queue1\x00', 0x5}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="268292", 0xff95}], 0x1) 676.229042ms ago: executing program 0 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@rdmsr={0x66, 0x18, {0x3f1}}, @nested_amd_clgi={0x17f, 0x10}], 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 607.635168ms ago: executing program 2 (id=17): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, 0x0, 0x0) 488.419273ms ago: executing program 4 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x14, &(0x7f0000000f00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 392.692889ms ago: executing program 2 (id=19): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000800)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) 335.57789ms ago: executing program 2 (id=20): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 296.915081ms ago: executing program 0 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) 216.52038ms ago: executing program 2 (id=22): r0 = syz_open_dev$sg(&(0x7f0000000700), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="0800000005000000a30c03a2"]) 144.115926ms ago: executing program 4 (id=23): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/168, &(0x7f0000000400)=0xa8) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[0x0]) write(r2, &(0x7f0000000100)='slave-24c02 0x1022', 0x12) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x5, 0x1, 0x7, 0x6c64}, 0x50) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r5, 0x4000, r4}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) socket$netlink(0x10, 0x3, 0xc) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) r10 = fanotify_init(0x20, 0x0) fanotify_mark(r10, 0x445, 0x1003, r9, 0x0) write$P9_RFSYNC(r9, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000440)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r12, 0x40103e05, &(0x7f0000000480)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56"}) 97.086408ms ago: executing program 2 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20044000) 0s ago: executing program 0 (id=25): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 90.875516][ T5627] cgroup: Unknown subsys name 'net' [ 91.017197][ T5627] cgroup: Unknown subsys name 'cpuset' [ 91.027008][ T5627] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.775757][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.740383][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.750688][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.761173][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.775696][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.779839][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.816409][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.819674][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.820196][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.822661][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.823673][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.824355][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.825754][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.831642][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.832794][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.836463][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.842035][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.846203][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.855073][ T4957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.859729][ T5657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.890719][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.893003][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.894873][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.901714][ T5651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.911951][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.923463][ T57] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.018031][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.029955][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.047683][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.080803][ T5640] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.090798][ T5644] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.119108][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.134537][ T5639] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.634278][ T5638] infiniband rxe0: set active [ 97.634303][ T5638] infiniband rxe0: added rxe_eth0 [ 97.692681][ T5638] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 97.692723][ T5638] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 97.692765][ T5638] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 97.707020][ T2230] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.826741][ T5638] RDS/IB: rxe0: added [ 97.827131][ T5638] smc: adding ib device rxe0 with port count 1 [ 97.831586][ T5638] smc: ib device rxe0 port 1 has no pnetid [ 97.871724][ T2230] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.915763][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.963700][ T57] Bluetooth: hci3: command tx timeout [ 98.006566][ T2230] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.044033][ T5646] Bluetooth: hci0: command tx timeout [ 98.045325][ T5646] Bluetooth: hci4: command tx timeout [ 98.045446][ T5646] Bluetooth: hci1: command tx timeout [ 98.046098][ T57] Bluetooth: hci2: command tx timeout [ 98.221575][ T32] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.345516][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.689680][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.852702][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.852839][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.853036][ T5645] bridge_slave_0: entered allmulticast mode [ 98.856754][ T5645] bridge_slave_0: entered promiscuous mode [ 98.941948][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.942186][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.942343][ T5645] bridge_slave_1: entered allmulticast mode [ 98.949546][ T5645] bridge_slave_1: entered promiscuous mode [ 98.983557][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.021227][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.022203][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.039126][ T5644] bridge_slave_0: entered allmulticast mode [ 99.041674][ T5644] bridge_slave_0: entered promiscuous mode [ 99.089578][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.090392][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.090504][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.090649][ T5644] bridge_slave_1: entered allmulticast mode [ 99.125896][ T5644] bridge_slave_1: entered promiscuous mode [ 99.176640][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.176740][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.176874][ T5640] bridge_slave_0: entered allmulticast mode [ 99.178549][ T5640] bridge_slave_0: entered promiscuous mode [ 99.210456][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.273933][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.274062][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.274206][ T5640] bridge_slave_1: entered allmulticast mode [ 99.276028][ T5640] bridge_slave_1: entered promiscuous mode [ 99.317451][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.320928][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.321014][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.321119][ T5639] bridge_slave_0: entered allmulticast mode [ 99.322395][ T5639] bridge_slave_0: entered promiscuous mode [ 99.340994][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.345635][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.346174][ T5639] bridge_slave_1: entered allmulticast mode [ 99.361165][ T5639] bridge_slave_1: entered promiscuous mode [ 99.432998][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.465682][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.482273][ T5645] team0: Port device team_slave_0 added [ 99.513663][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.515710][ T5645] team0: Port device team_slave_1 added [ 99.515890][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.555337][ T5644] team0: Port device team_slave_0 added [ 99.560509][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.625354][ T5644] team0: Port device team_slave_1 added [ 99.657922][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.661419][ T5640] team0: Port device team_slave_0 added [ 99.670219][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.670269][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.670341][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.767960][ T5640] team0: Port device team_slave_1 added [ 99.768785][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.768800][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.768824][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.828708][ T54] cfg80211: failed to load regulatory.db [ 99.839742][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.839759][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.839797][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.888931][ T5639] team0: Port device team_slave_0 added [ 99.920952][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.920973][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.921001][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.922223][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.922239][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.922263][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.945168][ T5639] team0: Port device team_slave_1 added [ 100.034288][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.034305][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.034325][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.043241][ T5646] Bluetooth: hci3: command tx timeout [ 100.122770][ T5649] Bluetooth: hci2: command tx timeout [ 100.122813][ T5649] Bluetooth: hci0: command tx timeout [ 100.123072][ T57] Bluetooth: hci1: command tx timeout [ 100.123151][ T5646] Bluetooth: hci4: command tx timeout [ 100.178676][ T5645] hsr_slave_0: entered promiscuous mode [ 100.180347][ T5645] hsr_slave_1: entered promiscuous mode [ 100.207391][ T5644] hsr_slave_0: entered promiscuous mode [ 100.208274][ T5644] hsr_slave_1: entered promiscuous mode [ 100.208878][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 100.208959][ T5644] Cannot create hsr debugfs directory [ 100.209843][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.209856][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.209879][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.285850][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.285869][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.285903][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.396848][ T5640] hsr_slave_0: entered promiscuous mode [ 100.398333][ T5640] hsr_slave_1: entered promiscuous mode [ 100.399000][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 100.399023][ T5640] Cannot create hsr debugfs directory [ 100.539041][ T5639] hsr_slave_0: entered promiscuous mode [ 100.539903][ T5639] hsr_slave_1: entered promiscuous mode [ 100.540526][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 100.540552][ T5639] Cannot create hsr debugfs directory [ 101.110269][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.122324][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.128638][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.143521][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.163878][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.169222][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.170231][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.170333][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.170492][ T5638] bridge_slave_0: entered allmulticast mode [ 101.172082][ T5638] bridge_slave_0: entered promiscuous mode [ 101.219581][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.225786][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.231063][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.238521][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.239100][ T5638] bridge_slave_1: entered allmulticast mode [ 101.244649][ T5638] bridge_slave_1: entered promiscuous mode [ 101.302652][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.312055][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.380923][ T5638] team0: Port device team_slave_0 added [ 101.388816][ T5638] team0: Port device team_slave_1 added [ 101.420736][ T5645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.430554][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.452416][ T5645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.463202][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.470978][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.470999][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.471026][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.471734][ T5645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.490649][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.546626][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.546645][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.546669][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.599887][ T5645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.610175][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.692737][ T5638] hsr_slave_0: entered promiscuous mode [ 101.693705][ T5638] hsr_slave_1: entered promiscuous mode [ 101.694311][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 101.694333][ T5638] Cannot create hsr debugfs directory [ 101.793199][ T5640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.797995][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.826562][ T5640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.829951][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.869786][ T5640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.880158][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.900806][ T5640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.910850][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.054635][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.059270][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.060180][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.087366][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.088430][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.091631][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.123246][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.123861][ T5642] Bluetooth: hci3: command tx timeout [ 102.128325][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.180770][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.202711][ T5642] Bluetooth: hci4: command tx timeout [ 102.202752][ T5642] Bluetooth: hci1: command tx timeout [ 102.202777][ T5642] Bluetooth: hci0: command tx timeout [ 102.202802][ T5642] Bluetooth: hci2: command tx timeout [ 102.305597][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.306003][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.310208][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.311246][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.319759][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.354716][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.358562][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.361201][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.371967][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.415240][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.415364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.446594][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.474071][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.474180][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.530113][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.571853][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.571935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.625506][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.625590][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.728768][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.746850][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.863493][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.871574][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.926091][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.926220][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.969935][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.970054][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.025209][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.030127][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.030245][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.085325][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.085461][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.160564][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.212525][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.212717][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.273146][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.273258][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.916987][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.190008][ T5644] veth0_vlan: entered promiscuous mode [ 104.204544][ T5646] Bluetooth: hci3: command tx timeout [ 104.266053][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.267897][ T5644] veth1_vlan: entered promiscuous mode [ 104.285133][ T5646] Bluetooth: hci2: command tx timeout [ 104.285177][ T5646] Bluetooth: hci0: command tx timeout [ 104.285203][ T5646] Bluetooth: hci1: command tx timeout [ 104.285228][ T5646] Bluetooth: hci4: command tx timeout [ 104.544478][ T5644] veth0_macvtap: entered promiscuous mode [ 104.560298][ T5645] veth0_vlan: entered promiscuous mode [ 104.589724][ T5644] veth1_macvtap: entered promiscuous mode [ 104.654779][ T5645] veth1_vlan: entered promiscuous mode [ 104.690158][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.737444][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.756517][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.817113][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.863749][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.863974][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.864017][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.864058][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.013427][ T5645] veth0_macvtap: entered promiscuous mode [ 105.061808][ T5645] veth1_macvtap: entered promiscuous mode [ 105.116654][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.217929][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.229759][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.229831][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.254043][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.294456][ T5640] veth0_vlan: entered promiscuous mode [ 105.337490][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.337514][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.346262][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.382982][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.391595][ T5640] veth1_vlan: entered promiscuous mode [ 105.504992][ T5639] veth0_vlan: entered promiscuous mode [ 105.573268][ T5644] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.588596][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.633983][ T5639] veth1_vlan: entered promiscuous mode [ 105.639023][ T5638] veth0_vlan: entered promiscuous mode [ 105.679807][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.679832][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.713391][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.749871][ T5638] veth1_vlan: entered promiscuous mode [ 105.780897][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.780922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.801606][ T5640] veth0_macvtap: entered promiscuous mode [ 105.840128][ T5640] veth1_macvtap: entered promiscuous mode [ 105.902127][ T5639] veth0_macvtap: entered promiscuous mode [ 105.939492][ T5639] veth1_macvtap: entered promiscuous mode [ 105.956191][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.957603][ T5858] fuse: fuse_file_passthrough_open: passthrough not enabled [ 105.999222][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.017981][ T5638] veth0_macvtap: entered promiscuous mode [ 106.058664][ T5638] veth1_macvtap: entered promiscuous mode [ 106.076889][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.121955][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.130757][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.131914][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.185375][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.222735][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.242917][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.243541][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.243772][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.285026][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.383944][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.409181][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.409208][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.482739][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.488170][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.488193][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.510851][ T54] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 106.587313][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.608869][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.608901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.623795][ T1016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.695779][ T54] usb 4-1: not running at top speed; connect to a high speed hub [ 106.695886][ T54] usb 4-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 106.699723][ T54] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 106.699760][ T54] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 106.751768][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.751803][ T54] usb 4-1: Product: syz [ 106.751820][ T54] usb 4-1: Manufacturer: syz [ 106.751836][ T54] usb 4-1: SerialNumber: syz [ 106.765173][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.765221][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.826316][ T5861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.849341][ T54] oti6858 4-1:1.0: oti6858 converter detected [ 106.863285][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.886214][ T54] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 106.946418][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.946443][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.974763][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.042928][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.042953][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.369520][ T5785] usb 4-1: USB disconnect, device number 2 [ 107.488848][ T5785] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 107.512095][ T5785] oti6858 4-1:1.0: device disconnected [ 107.581269][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.617362][ T5876] FAULT_INJECTION: forcing a failure. [ 107.617362][ T5876] name failslab, interval 1, probability 0, space 0, times 1 [ 107.617424][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 107.617450][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.617473][ T5876] Call Trace: [ 107.617488][ T5876] [ 107.617507][ T5876] dump_stack_lvl+0xe8/0x150 [ 107.617564][ T5876] should_fail_ex+0x3eb/0x540 [ 107.617598][ T5876] should_failslab+0xa8/0x100 [ 107.617638][ T5876] __kmalloc_noprof+0xf9/0x710 [ 107.617670][ T5876] ? fib_default_rule_add+0x4c/0x380 [ 107.617707][ T5876] ? fib_default_rule_add+0x4c/0x380 [ 107.617736][ T5876] ? ip6mr_new_table_set+0x66/0x100 [ 107.617778][ T5876] fib_default_rule_add+0x4c/0x380 [ 107.617813][ T5876] ip6mr_net_init+0x2f2/0x6b0 [ 107.617845][ T5876] ? inet6_net_init+0x4ff/0x8c0 [ 107.617870][ T5876] ? __pfx_ip6mr_net_init+0x10/0x10 [ 107.617904][ T5876] ? ac6_proc_init+0x59/0x70 [ 107.617936][ T5876] ops_init+0x35d/0x5d0 [ 107.617983][ T5876] setup_net+0x118/0x350 [ 107.618035][ T5876] ? __pfx_setup_net+0x10/0x10 [ 107.618066][ T5876] ? down_read_killable+0x1b6/0x3b0 [ 107.618094][ T5876] ? __ns_common_init+0x384/0x590 [ 107.618118][ T5876] copy_net_ns+0x536/0x770 [ 107.618152][ T5876] create_new_namespaces+0x3f0/0x6b0 [ 107.618185][ T5876] ? security_capable+0x7e/0x2c0 [ 107.618223][ T5876] unshare_nsproxy_namespaces+0x144/0x190 [ 107.618261][ T5876] ksys_unshare+0x532/0x890 [ 107.618299][ T5876] ? __pfx_ksys_unshare+0x10/0x10 [ 107.618332][ T5876] ? rcu_is_watching+0x16/0xb0 [ 107.618375][ T5876] __x64_sys_unshare+0x38/0x50 [ 107.618394][ T5876] do_syscall_64+0x166/0x520 [ 107.618421][ T5876] ? trace_irq_disable+0x3b/0x140 [ 107.618453][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.618478][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 107.618506][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.618530][ T5876] RIP: 0033:0x7fe96639f559 [ 107.618568][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.618591][ T5876] RSP: 002b:00007fe9645f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.618640][ T5876] RAX: ffffffffffffffda RBX: 00007fe966625fa0 RCX: 00007fe96639f559 [ 107.618659][ T5876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 107.618676][ T5876] RBP: 00007fe966436b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.618692][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.618708][ T5876] R13: 00007fe966626038 R14: 00007fe966625fa0 R15: 00007ffe90fca8c8 [ 107.618746][ T5876] [ 108.291813][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 108.291841][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11'. [ 108.576513][ T5766] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.723114][ T5766] usb 2-1: Using ep0 maxpacket: 32 [ 108.727211][ T5766] usb 2-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 108.729136][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.784472][ T5766] usb 2-1: config 0 descriptor?? [ 108.912107][ T5766] as10x_usb: device has been detected [ 108.938044][ T5766] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 108.976822][ T5913] program syz.2.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.075916][ T5894] ------------[ cut here ]------------ [ 109.075936][ T5894] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 109.075953][ T5894] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: syz.1.13/5894 [ 109.099840][ T5894] Modules linked in: [ 109.104491][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 109.113806][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.124061][ T5894] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 109.129613][ T5894] Code: 1f be 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 23 42 b8 05 00 75 13 48 8d 3d 96 41 bb 05 48 c7 c6 00 28 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 109.149467][ T5894] RSP: 0018:ffffc90005127a60 EFLAGS: 00010246 [ 109.155734][ T5894] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 109.164674][ T5894] RDX: ffffc90004022000 RSI: ffffffff8c2d2800 RDI: ffffffff91c11f70 [ 109.173578][ T5894] RBP: ffffc90005127c00 R08: ffffffff91be1ff3 R09: 1ffffffff237c3fe [ 109.181733][ T5894] R10: dffffc0000000000 R11: fffffbfff237c3ff R12: ffff88803796ab30 [ 109.189979][ T5894] R13: 0000000000000000 R14: 1ffff92000a24f60 R15: 0000000000000000 [ 109.198086][ T5894] FS: 00007f2979ffb6c0(0000) GS:ffff88812340e000(0000) knlGS:0000000000000000 [ 109.207996][ T5894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.215403][ T5894] CR2: 00007fa1f31556c8 CR3: 0000000074c74000 CR4: 00000000003526f0 [ 109.223576][ T5894] Call Trace: [ 109.226914][ T5894] [ 109.229906][ T5894] ? trace_contention_end+0x3d/0x140 [ 109.235394][ T5894] ? __mutex_lock+0x305/0x15a0 [ 109.240222][ T5894] ? dmx_ts_feed_set+0x330/0x560 [ 109.245827][ T5894] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 109.251536][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 109.257032][ T5894] ? __mutex_unlock_slowpath+0x731/0x900 [ 109.262852][ T5894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.268929][ T5894] as102_dvb_dmx_start_feed+0x70/0x290 [ 109.274859][ T5894] dmx_ts_feed_start_filtering+0x129/0x220 [ 109.280752][ T5894] dvb_dmxdev_filter_start+0x434/0x10d0 [ 109.286695][ T5894] dvb_demux_do_ioctl+0x48b/0x540 [ 109.291882][ T5894] dvb_usercopy+0x199/0x2e0 [ 109.296703][ T5894] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 109.303222][ T5894] ? __pfx_dvb_usercopy+0x10/0x10 [ 109.308333][ T5894] ? __fget_files+0x2a/0x420 [ 109.313704][ T5894] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 109.319079][ T5894] dvb_demux_ioctl+0x29/0x40 [ 109.324564][ T5894] __se_sys_ioctl+0xfc/0x170 [ 109.329248][ T5894] do_syscall_64+0x166/0x520 [ 109.334287][ T5894] ? trace_irq_disable+0x3b/0x140 [ 109.339432][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.345622][ T5894] ? clear_bhb_loop+0x70/0xc0 [ 109.350374][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.356405][ T5894] RIP: 0033:0x7f297919f559 [ 109.360874][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.380620][ T5894] RSP: 002b:00007f2979ffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.389220][ T5894] RAX: ffffffffffffffda RBX: 00007f2979425fa0 RCX: 00007f297919f559 [ 109.397361][ T5894] RDX: 0000200000000080 RSI: 0000000040146f2c RDI: 0000000000000004 [ 109.407080][ T5894] RBP: 00007f2979236b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.416259][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.424425][ T5894] R13: 00007f2979426038 R14: 00007f2979425fa0 R15: 00007ffe9c0c3d28 [ 109.432525][ T5894] [ 109.435636][ T5894] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.442970][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 109.452130][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.462241][ T5894] Call Trace: [ 109.465566][ T5894] [ 109.468539][ T5894] vpanic+0x26f/0x710 [ 109.472579][ T5894] panic+0xc5/0xd0 [ 109.476380][ T5894] ? __pfx_panic+0x10/0x10 [ 109.480950][ T5894] __warn+0x315/0x4c0 [ 109.484996][ T5894] ? __mutex_lock+0x132a/0x15a0 [ 109.489932][ T5894] ? __mutex_lock+0x132a/0x15a0 [ 109.494847][ T5894] __report_bug+0x276/0x570 [ 109.499420][ T5894] ? __mutex_lock+0x132a/0x15a0 [ 109.504385][ T5894] ? __pfx___report_bug+0x10/0x10 [ 109.509481][ T5894] ? __lock_acquire+0x747/0x2de0 [ 109.514485][ T5894] report_bug_entry+0x19b/0x290 [ 109.519397][ T5894] ? __mutex_lock+0x1331/0x15a0 [ 109.524305][ T5894] ? __mutex_lock+0x1336/0x15a0 [ 109.529232][ T5894] handle_bug+0xce/0x200 [ 109.533547][ T5894] exc_invalid_op+0x1a/0x50 [ 109.538108][ T5894] asm_exc_invalid_op+0x1a/0x20 [ 109.543013][ T5894] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 109.548511][ T5894] Code: 1f be 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 23 42 b8 05 00 75 13 48 8d 3d 96 41 bb 05 48 c7 c6 00 28 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 109.568142][ T5894] RSP: 0018:ffffc90005127a60 EFLAGS: 00010246 [ 109.574268][ T5894] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 109.582271][ T5894] RDX: ffffc90004022000 RSI: ffffffff8c2d2800 RDI: ffffffff91c11f70 [ 109.590273][ T5894] RBP: ffffc90005127c00 R08: ffffffff91be1ff3 R09: 1ffffffff237c3fe [ 109.598277][ T5894] R10: dffffc0000000000 R11: fffffbfff237c3ff R12: ffff88803796ab30 [ 109.606299][ T5894] R13: 0000000000000000 R14: 1ffff92000a24f60 R15: 0000000000000000 [ 109.614310][ T5894] ? trace_contention_end+0x3d/0x140 [ 109.619647][ T5894] ? __mutex_lock+0x305/0x15a0 [ 109.624450][ T5894] ? dmx_ts_feed_set+0x330/0x560 [ 109.629435][ T5894] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 109.635099][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 109.640157][ T5894] ? __mutex_unlock_slowpath+0x731/0x900 [ 109.645823][ T5894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.651867][ T5894] as102_dvb_dmx_start_feed+0x70/0x290 [ 109.657357][ T5894] dmx_ts_feed_start_filtering+0x129/0x220 [ 109.663225][ T5894] dvb_dmxdev_filter_start+0x434/0x10d0 [ 109.668809][ T5894] dvb_demux_do_ioctl+0x48b/0x540 [ 109.673881][ T5894] dvb_usercopy+0x199/0x2e0 [ 109.678409][ T5894] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 109.683987][ T5894] ? __pfx_dvb_usercopy+0x10/0x10 [ 109.689055][ T5894] ? __fget_files+0x2a/0x420 [ 109.693683][ T5894] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 109.698996][ T5894] dvb_demux_ioctl+0x29/0x40 [ 109.703637][ T5894] __se_sys_ioctl+0xfc/0x170 [ 109.708293][ T5894] do_syscall_64+0x166/0x520 [ 109.712919][ T5894] ? trace_irq_disable+0x3b/0x140 [ 109.717991][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.724111][ T5894] ? clear_bhb_loop+0x70/0xc0 [ 109.728814][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.734731][ T5894] RIP: 0033:0x7f297919f559 [ 109.739194][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.758823][ T5894] RSP: 002b:00007f2979ffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.767272][ T5894] RAX: ffffffffffffffda RBX: 00007f2979425fa0 RCX: 00007f297919f559 [ 109.775269][ T5894] RDX: 0000200000000080 RSI: 0000000040146f2c RDI: 0000000000000004 [ 109.783263][ T5894] RBP: 00007f2979236b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.791270][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.799259][ T5894] R13: 00007f2979426038 R14: 00007f2979425fa0 R15: 00007ffe9c0c3d28 [ 109.807269][ T5894] [ 109.810920][ T5894] Kernel Offset: disabled [ 109.815267][ T5894] Rebooting in 86400 seconds..