last executing test programs: 2.819458171s ago: executing program 1 (id=2): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x1000000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000100)={0x0, {0x0, 0x200}}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0x8ed8, 0x5, 0x3ff, 0x75, &(0x7f0000000140)=""/117, 0x8, &(0x7f00000001c0)=""/8, 0x99, &(0x7f0000000200)=""/153}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x100000001, 0x101042) tee(r2, r0, 0x7f, 0x1) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, &(0x7f0000000340)=@ret_unlink={{0x4, 0x1, 0x0, 0x0, 0xffffff76}, {0x2}}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x17ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}]}, 0x50}}, 0x44015) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'pim6reg\x00'}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000580)={0xe, 0x2, 0x1, 0x0, 0x46}) r9 = accept$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000006c0)=r10, 0x4) write$P9_RREAD(r7, &(0x7f0000000700)={0xa9, 0x75, 0x1, {0x9e, "46ebf5555581ff03366d818a12dc8f8d92730cf9962aff3f40563088b4b5ef7ad61c56e4f432ef8b39560a001e7137484949da13d68a8f2a119e5e3623c2231d04ea46b37ffb43e0cb221d348ecf6b066be83b5864daf65297a15196fd39f58facf2b21a2b7b93d8a159945357c9b613695d475c4c5eb97a8d7aa48177d4eef2aed6ca39c1c01e01d64074a0e688c3b2998d3b41f76e53c521e4a68a018a"}}, 0xa9) close_range(r0, r7, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x1, 0x196, [0x200000000800, 0x0, 0x0, 0x200000000830, 0x200000000936], 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x2, 0x1, [{0x5, 0x4, 0x88e5, 'batadv_slave_1\x00', 'team_slave_0\x00', 'bridge0\x00', 'xfrm0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x6, 0x6004, 0x4, 0x4}}}], [], @snat={'snat\x00', 0x10, {{@random="bace66de3d11", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x20e) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000b80)={{@align=0x6, {0x3, 0x0, 0x8000, 0xfffffffff6db5f09}}, {{[0xd, 0x0, 0x5]}, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000a40)=[{{@align=0x6, {0x8000, 0x3, 0x8, 0xffff}}, 0x4, 0x0, '/dev/vhost-vsock\x00'}, {{@_ha_fsid={[0x3, 0x81]}, {0x5, 0x9e, 0xe, 0x7}}, 0xddf, 0x0, 'nl80211\x00'}, {{@_ha_fsid={[0x8001, 0x4]}, {0xf139, 0x9, 0x7, 0xd689}}, 0x1, 0x0, '^\x00'}, {{@align=0xa5b, {0x5, 0x40, 0xffff, 0x8}}, 0x2, 0x0, '&\x00'}, {{@align=0x4, {0x8, 0x9, 0x80000000, 0x20}}, 0x40000000, 0x0, 'bridge0\x00'}, {{@align=0x4, {0xd239, 0x7, 0x1, 0x1}}, 0xb, 0x0, '/dev/vim2m\x00'}, {{@align=0xcf, {0xe41d, 0x0, 0xffffff47, 0x8}}, 0x9, 0x0, '[%!\x00'}, {{@_ha_fsid={[0x0, 0x400]}, {0x4, 0x2, 0x1, 0x815}}, 0x200, 0x0, '@\\\x00'}]}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x6c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048081}, 0x2000804) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d00), 0x100, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r12, 0xc0046d00, &(0x7f0000000d40)=0x8) 1.953558817s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa14069f62eb2cfe0cbb3d0000000000000000bbfe8000"/48, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5095000090780000"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, r5}}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xec, 0xfbed, 0x10000002, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x43, 0x9}}]}, 0x8c}}, 0x800) 1.941082421s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xfffffffb}, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r3, &(0x7f00000002c0)=""/140, 0x8c) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102385, 0x18ff1, 0x41e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'team0\x00'}) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="00267dfec8aade0000008a2401c200"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)={0x4, 0x0, [{0xfff9ffff, 0x5f, &(0x7f0000000140)=""/95}, {0x8000000, 0xbb, &(0x7f0000000780)=""/187}, {0x8159000, 0xd9, &(0x7f0000000380)=""/217}, {0x0, 0xa9, &(0x7f0000000600)=""/169}]}) (async) r7 = io_uring_setup(0x3fc, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0xffff, 0xfff, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.817988208s ago: executing program 1 (id=6): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0xc, 0x5, 0x7ae7, 0x10, @remote, @private0, 0x20, 0x7800, 0x2020, 0x5}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {0xc}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0x8c0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x24020400) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syncfs(r10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x20000040) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f000006e000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="0f30c40263fd2eecec660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000fac01c1c1644c0fc72f", 0x35}], 0x1, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000e, 0x82053, 0xffffffffffffffff, 0x200000) 1.435189397s ago: executing program 4 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x24600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r3, 0x2, 0xffffffffffffffff) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000140)=0x4) read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/25, 0x8a) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) r6 = dup2(r4, r4) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.334006075s ago: executing program 0 (id=1): prctl$PR_SCHED_CORE(0x46, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x1607, 0x2, 0x2}, 0x18, 0x7) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff5) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.1754105s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x70bd2a, 0xfdfffffe, {0x0, 0x0, 0x0, r2, 0x4982, 0x701ca}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000000)={&(0x7f0000000400)=[{0x2, 0x1000, 0x0, 0x0}, {0x4, 0x1765d4219376f3a4, 0x0, 0x0}, {0xf5ef, 0xc010, 0x0, 0x0}], 0x3}) 726.995437ms ago: executing program 1 (id=8): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000ac654fefdb660b0906d677d26ac01b5de279cc5aea5afe0e519adc0255c62bb5b155d504a7bae2218c5c204accc17f5c07b7eef35c0ba605dbe3859e8a30cf58120f2a90d04fcd1df87a33d0a2a60143f951e68c238d423902d3045a4766f405052a2f79ff162e3cc14963", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25050000000800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000ac654fefdb660b0906d677d26ac01b5de279cc5aea5afe0e519adc0255c62bb5b155d504a7bae2218c5c204accc17f5c07b7eef35c0ba605dbe3859e8a30cf58120f2a90d04fcd1df87a33d0a2a60143f951e68c238d423902d3045a4766f405052a2f79ff162e3cc14963", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25050000000800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=9): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x10004000) unshare(0x2c020400) r4 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r4, 0x4}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="8f506370d700de40390d6ff5d310592b608bdc93e7f6e8aee03f6ac56a5c3c5c61a090821c6eaae97aa7dcbd18fa42cdf88f55c8eb28e9e8e0a073216bfc555b6ca900ba70d948c8f5afb0fcfd8d043483c8295ef23e7ad2d5bc1436a86f403b62500f32d3f03c3be33d816c519e446ff0519d2fcccde9b66fb5dd1df6fc6acfe08b04bd88e36ccf"], 0x18) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_tables_targets\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 81.356856][ T5828] cgroup: Unknown subsys name 'net' [ 81.470908][ T5828] cgroup: Unknown subsys name 'cpuset' [ 81.481795][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.157664][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.525142][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.534536][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.542794][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.551885][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.560783][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.566928][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.576231][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.581945][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.585147][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.600008][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.607321][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.616171][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.618857][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.626350][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.636319][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.644343][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.651382][ T5161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.653370][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.667624][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.672798][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.677146][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.700755][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.708646][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.719245][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.726385][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.430283][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 88.500903][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.516184][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 88.641018][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 88.661414][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 88.798360][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.805815][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.813511][ T5857] bridge_slave_0: entered allmulticast mode [ 88.821185][ T5857] bridge_slave_0: entered promiscuous mode [ 88.883796][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.896404][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.903715][ T5857] bridge_slave_1: entered allmulticast mode [ 88.911410][ T5857] bridge_slave_1: entered promiscuous mode [ 88.931912][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.940261][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.947975][ T5860] bridge_slave_0: entered allmulticast mode [ 88.955270][ T5860] bridge_slave_0: entered promiscuous mode [ 89.010505][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.018068][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.025375][ T5860] bridge_slave_1: entered allmulticast mode [ 89.034899][ T5860] bridge_slave_1: entered promiscuous mode [ 89.118442][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.125750][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.132974][ T5861] bridge_slave_0: entered allmulticast mode [ 89.140559][ T5861] bridge_slave_0: entered promiscuous mode [ 89.148385][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.155702][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.163168][ T5862] bridge_slave_0: entered allmulticast mode [ 89.171113][ T5862] bridge_slave_0: entered promiscuous mode [ 89.182228][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.206895][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.216591][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.223962][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.231415][ T5861] bridge_slave_1: entered allmulticast mode [ 89.239043][ T5861] bridge_slave_1: entered promiscuous mode [ 89.246423][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.253644][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.261430][ T5862] bridge_slave_1: entered allmulticast mode [ 89.268981][ T5862] bridge_slave_1: entered promiscuous mode [ 89.278987][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.288306][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.295972][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.303198][ T5858] bridge_slave_0: entered allmulticast mode [ 89.310911][ T5858] bridge_slave_0: entered promiscuous mode [ 89.321343][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.384932][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.392235][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.399728][ T5858] bridge_slave_1: entered allmulticast mode [ 89.407063][ T5858] bridge_slave_1: entered promiscuous mode [ 89.419109][ T5860] team0: Port device team_slave_0 added [ 89.470512][ T5860] team0: Port device team_slave_1 added [ 89.479389][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.491737][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.504079][ T5857] team0: Port device team_slave_0 added [ 89.534253][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.546395][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.557574][ T5857] team0: Port device team_slave_1 added [ 89.566132][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.620693][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.631015][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.638295][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.664723][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.721755][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.729169][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.739615][ T5852] Bluetooth: hci1: command tx timeout [ 89.756259][ T5847] Bluetooth: hci0: command tx timeout [ 89.762607][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.780636][ T5861] team0: Port device team_slave_0 added [ 89.788912][ T5862] team0: Port device team_slave_0 added [ 89.796477][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.803535][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.829802][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.840443][ T5847] Bluetooth: hci3: command tx timeout [ 89.840743][ T5847] Bluetooth: hci4: command tx timeout [ 89.846264][ T5852] Bluetooth: hci2: command tx timeout [ 89.878883][ T5858] team0: Port device team_slave_0 added [ 89.887370][ T5861] team0: Port device team_slave_1 added [ 89.895015][ T5862] team0: Port device team_slave_1 added [ 89.901559][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.909014][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.935174][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.958285][ T5858] team0: Port device team_slave_1 added [ 90.000030][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.007160][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.033225][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.046013][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.053038][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.079094][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.152402][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.159626][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.185791][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.227132][ T5860] hsr_slave_0: entered promiscuous mode [ 90.233779][ T5860] hsr_slave_1: entered promiscuous mode [ 90.241411][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.248435][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.274646][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.286986][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.293996][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.320248][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.345453][ T5857] hsr_slave_0: entered promiscuous mode [ 90.352388][ T5857] hsr_slave_1: entered promiscuous mode [ 90.359061][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 90.364967][ T5857] Cannot create hsr debugfs directory [ 90.374576][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.381632][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.407771][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.499569][ T5862] hsr_slave_0: entered promiscuous mode [ 90.507084][ T5862] hsr_slave_1: entered promiscuous mode [ 90.513407][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 90.519246][ T5862] Cannot create hsr debugfs directory [ 90.631332][ T5861] hsr_slave_0: entered promiscuous mode [ 90.638255][ T5861] hsr_slave_1: entered promiscuous mode [ 90.644671][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 90.650568][ T5861] Cannot create hsr debugfs directory [ 90.686320][ T5858] hsr_slave_0: entered promiscuous mode [ 90.692967][ T5858] hsr_slave_1: entered promiscuous mode [ 90.700722][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 90.706871][ T5858] Cannot create hsr debugfs directory [ 91.216460][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.237232][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.246781][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.259163][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.267375][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.278474][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.294447][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.305284][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.381245][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.392550][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.411824][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.422017][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.430986][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.442744][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.452462][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.462533][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.554585][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.567139][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.575326][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.588297][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.607198][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.617961][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.627441][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.638168][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.722036][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.779350][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.789896][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.812757][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.820180][ T5847] Bluetooth: hci1: command tx timeout [ 91.820732][ T5841] Bluetooth: hci0: command tx timeout [ 91.834460][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.853410][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.863177][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.871790][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.884375][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.896018][ T5841] Bluetooth: hci4: command tx timeout [ 91.896044][ T5847] Bluetooth: hci2: command tx timeout [ 91.902013][ T5852] Bluetooth: hci3: command tx timeout [ 91.932372][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.970916][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.978501][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.027162][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.034486][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.087492][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.098678][ T5861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.119374][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.130277][ T5861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.140219][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.151225][ T806] cfg80211: failed to load regulatory.db [ 92.160539][ T5861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.169604][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.179835][ T5861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.220823][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.256769][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.319760][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.333358][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.349885][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.357218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.382021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.389197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.417318][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.424589][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.434253][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.441620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.476807][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.500955][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.554958][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.581579][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.588916][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.628096][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.635342][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.704248][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.758728][ T5857] veth0_vlan: entered promiscuous mode [ 92.782884][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.807720][ T5857] veth1_vlan: entered promiscuous mode [ 92.829452][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.836714][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.851864][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.875025][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.882183][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.902048][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.019573][ T5857] veth0_macvtap: entered promiscuous mode [ 93.044705][ T5857] veth1_macvtap: entered promiscuous mode [ 93.065743][ T5862] veth0_vlan: entered promiscuous mode [ 93.091967][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.108950][ T5860] veth0_vlan: entered promiscuous mode [ 93.127595][ T5862] veth1_vlan: entered promiscuous mode [ 93.143453][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.161292][ T5860] veth1_vlan: entered promiscuous mode [ 93.173281][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.201957][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.226760][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236705][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.257887][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280112][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.346626][ T5858] veth0_vlan: entered promiscuous mode [ 93.393796][ T5860] veth0_macvtap: entered promiscuous mode [ 93.403529][ T5862] veth0_macvtap: entered promiscuous mode [ 93.430452][ T5860] veth1_macvtap: entered promiscuous mode [ 93.441578][ T5858] veth1_vlan: entered promiscuous mode [ 93.460035][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.474907][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.493907][ T5862] veth1_macvtap: entered promiscuous mode [ 93.554587][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.559974][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.570720][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.591327][ T5861] veth0_vlan: entered promiscuous mode [ 93.620625][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.636661][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.659752][ T5861] veth1_vlan: entered promiscuous mode [ 93.686672][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.703209][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.718004][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.733238][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.745712][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.757749][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.796461][ T5858] veth0_macvtap: entered promiscuous mode [ 93.823447][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.872075][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.883566][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.896725][ T5841] Bluetooth: hci1: command tx timeout [ 93.902561][ T5841] Bluetooth: hci0: command tx timeout [ 93.916073][ T5858] veth1_macvtap: entered promiscuous mode [ 93.925305][ T5861] veth0_macvtap: entered promiscuous mode [ 93.934520][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.960562][ T5939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 93.967242][ T5939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.975643][ T5841] Bluetooth: hci4: command tx timeout [ 93.981133][ T5852] Bluetooth: hci3: command tx timeout [ 93.981531][ T5847] Bluetooth: hci2: command tx timeout [ 94.000103][ T5861] veth1_macvtap: entered promiscuous mode [ 94.012446][ T5939] vhci_hcd vhci_hcd.0: Device attached [ 94.132754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.149708][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.161579][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.172870][ T5940] vhci_hcd: connection closed [ 94.176733][ T58] vhci_hcd vhci_hcd.1: stop threads [ 94.188156][ T58] vhci_hcd vhci_hcd.1: release socket [ 94.195467][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 94.196045][ T5909] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 94.223676][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.246225][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.259523][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.270297][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.280094][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.313994][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.323329][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358683][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.383064][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.392407][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.393328][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.410514][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.431295][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431669][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.449137][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.461469][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.476788][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.702179][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.739703][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.833823][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.873140][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.897155][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.955777][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.990482][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.085407][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.104739][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.808625][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.876079][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.976207][ T5847] Bluetooth: hci0: command tx timeout [ 95.976958][ T5852] Bluetooth: hci1: command tx timeout [ 96.006143][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 96.020465][ T10] usb 1-1: config 123 interface 0 has no altsetting 0 [ 96.053500][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 96.065976][ T5852] Bluetooth: hci3: command tx timeout [ 96.067647][ T5847] Bluetooth: hci4: command tx timeout [ 96.071479][ T5841] Bluetooth: hci2: command tx timeout [ 96.091660][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.103925][ T10] usb 1-1: Product: syz [ 96.109726][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 96.116764][ T10] usb 1-1: Manufacturer: syz [ 96.123300][ T10] usb 1-1: SerialNumber: syz [ 96.129460][ T5909] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 96.157833][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.235139][ T5909] pvrusb2: Hardware description: Terratec Grabster AV400 [ 96.246571][ T5909] pvrusb2: ********** [ 96.250742][ T5909] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 96.269646][ T5909] pvrusb2: Important functionality might not be entirely working. [ 96.280728][ T5909] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 96.312940][ T5909] pvrusb2: ********** [ 96.369737][ T10] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 96.443335][ T2365] pvrusb2: Invalid write control endpoint [ 96.478696][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.523357][ T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 96.550891][ T10] usb 1-1: media controller created [ 96.652503][ T5963] macvlan0: entered promiscuous mode [ 96.670497][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.694092][ T5963] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 96.706064][ T5963] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 96.714601][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 96.723684][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.733880][ T5963] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 96.739317][ T5963] Code: e0 83 4b 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d b0 c9 92 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 a6 3f 78 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 96.759131][ T5963] RSP: 0018:ffffc90005137420 EFLAGS: 00010206 [ 96.765238][ T5963] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a4b8303 [ 96.773267][ T5963] RDX: 0000000000000000 RSI: ffffffff8e24a525 RDI: 00000000000000c0 [ 96.781278][ T5963] RBP: ffffc900051375d8 R08: ffffc90005137547 R09: 0000000000000000 [ 96.789288][ T5963] R10: ffffc90005137520 R11: fffff52000a26ea9 R12: 0000000000000068 [ 96.797547][ T5963] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000a26e9c [ 96.805540][ T5963] FS: 00007f2d325f66c0(0000) GS:ffff88812521e000(0000) knlGS:0000000000000000 [ 96.814597][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.821251][ T5963] CR2: 000000110c44612f CR3: 000000003431a000 CR4: 00000000003526f0 [ 96.829255][ T5963] Call Trace: [ 96.832609][ T5963] [ 96.835595][ T5963] ? __mutex_lock+0x319/0x1550 [ 96.840419][ T5963] ? __mutex_trylock_common+0x158/0x260 [ 96.845996][ T5963] ? dvb_usbv2_generic_write+0x26/0x60 [ 96.851511][ T5963] ? __pfx___mutex_lock+0x10/0x10 [ 96.856567][ T5963] ? __pfx___mutex_lock+0x10/0x10 [ 96.861625][ T5963] ? __mutex_lock+0x319/0x1550 [ 96.866425][ T5963] dvb_usbv2_generic_write+0x26/0x60 [ 96.871749][ T5963] mxl111sf_ctrl_msg+0x160/0x2f0 [ 96.876810][ T5963] mxl111sf_write_reg+0xa9/0x1b0 [ 96.881868][ T5963] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 96.887441][ T5963] ? __bpf_trace_contention_end+0xda/0x150 [ 96.893368][ T5963] ? lock_release+0x4b/0x3c0 [ 96.897996][ T5963] mxl111sf_i2c_xfer+0x496/0x5100 [ 96.903059][ T5963] ? unwind_next_frame+0xa6/0x2550 [ 96.908296][ T5963] ? unwind_next_frame+0xa6/0x2550 [ 96.913450][ T5963] ? rcu_is_watching+0x15/0xb0 [ 96.918234][ T5963] ? rcu_is_watching+0x15/0xb0 [ 96.923024][ T5963] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 96.928515][ T5963] ? is_bpf_text_address+0x292/0x2b0 [ 96.933825][ T5963] ? is_bpf_text_address+0x26/0x2b0 [ 96.939052][ T5963] ? kernel_text_address+0xa5/0xe0 [ 96.944200][ T5963] ? __kernel_text_address+0xd/0x30 [ 96.949439][ T5963] ? unwind_get_return_address+0x4d/0x90 [ 96.955199][ T5963] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.961477][ T5963] ? arch_stack_walk+0xfb/0x150 [ 96.966360][ T5963] ? stack_trace_save+0xa9/0x100 [ 96.971340][ T5963] ? __pfx_stack_trace_save+0x10/0x10 [ 96.976748][ T5963] ? check_path+0x21/0x40 [ 96.981121][ T5963] ? check_noncircular+0xda/0x150 [ 96.986181][ T5963] ? add_lock_to_list+0xc7/0x100 [ 96.991176][ T5963] ? lockdep_unlock+0x5d/0xd0 [ 96.995886][ T5963] ? __lock_acquire+0x146e/0x2cf0 [ 97.000962][ T5963] __i2c_transfer+0x79a/0x1f70 [ 97.005812][ T5963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 97.011652][ T5963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.017494][ T5963] ? i2c_transfer+0xc8/0x2d0 [ 97.022216][ T5963] i2c_transfer+0x1cc/0x2d0 [ 97.026771][ T5963] i2cdev_ioctl_rdwr+0x460/0x740 [ 97.031845][ T5963] i2cdev_ioctl+0x6a5/0x880 [ 97.036480][ T5963] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 97.041626][ T5963] ? __fget_files+0x3a0/0x420 [ 97.046341][ T5963] ? __fget_files+0x2a/0x420 [ 97.050969][ T5963] ? bpf_lsm_file_ioctl+0x9/0x20 [ 97.055946][ T5963] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 97.061048][ T5963] __se_sys_ioctl+0xfc/0x170 [ 97.065670][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.071767][ T5963] do_syscall_64+0x15f/0xf80 [ 97.076399][ T5963] ? trace_irq_disable+0x3b/0x140 [ 97.081462][ T5963] ? clear_bhb_loop+0x40/0x90 [ 97.086222][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.092149][ T5963] RIP: 0033:0x7f2d3439c819 [ 97.096596][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.116320][ T5963] RSP: 002b:00007f2d325f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.124941][ T5963] RAX: ffffffffffffffda RBX: 00007f2d34615fa0 RCX: 00007f2d3439c819 [ 97.132942][ T5963] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000007 [ 97.141030][ T5963] RBP: 00007f2d34432c91 R08: 0000000000000000 R09: 0000000000000000 [ 97.149027][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.157045][ T5963] R13: 00007f2d34616038 R14: 00007f2d34615fa0 R15: 00007f2d3473fa48 [ 97.165073][ T5963] [ 97.168114][ T5963] Modules linked in: [ 97.173770][ T2365] pvrusb2: Invalid write control endpoint [ 97.180095][ T5963] ---[ end trace 0000000000000000 ]--- [ 97.190299][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 97.205611][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 97.213321][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 97.223408][ T2365] pvrusb2: Device being rendered inoperable [ 97.229555][ T2365] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 97.236723][ T2365] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 97.246095][ T2365] pvrusb2: Attached sub-driver cx25840 [ 97.255890][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 97.270124][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 97.279944][ T5963] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 97.292558][ T5963] Code: e0 83 4b 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d b0 c9 92 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 a6 3f 78 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 97.319942][ T5963] RSP: 0018:ffffc90005137420 EFLAGS: 00010206 [ 97.333702][ T5963] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a4b8303 [ 97.354602][ T5963] RDX: 0000000000000000 RSI: ffffffff8e24a525 RDI: 00000000000000c0 [ 97.387331][ T5963] RBP: ffffc900051375d8 R08: ffffc90005137547 R09: 0000000000000000 [ 97.431327][ T5963] R10: ffffc90005137520 R11: fffff52000a26ea9 R12: 0000000000000068 [ 97.458389][ T5963] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000a26e9c [ 97.486892][ T5963] FS: 00007f2d325f66c0(0000) GS:ffff88812531e000(0000) knlGS:0000000000000000 [ 97.510500][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.519273][ T5963] CR2: 000020000003e030 CR3: 000000003431a000 CR4: 00000000003526f0 [ 97.532085][ T5978] futex_wake_op: syz.3.9 tries to shift op by -1; fix this program [ 97.541299][ T5963] Kernel panic - not syncing: Fatal exception [ 97.548323][ T5963] Kernel Offset: disabled [ 97.552663][ T5963] Rebooting in 86400 seconds..