last executing test programs: 13.004460262s ago: executing program 3 (id=28): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4008004) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001002dbd7002fe00000000000000", @ANYRES32=0x0, @ANYBLOB="a021030004100000140003006e657464657673696d300000000000001800168014000180100006"], 0x60}, 0x1, 0x0, 0x0, 0x6008010}, 0x4000844) 10.881776394s ago: executing program 3 (id=32): r0 = socket(0xa, 0x3, 0x3a) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000140)={0x14, 0x4d, 0x5, 0x3, 0x53a2, 0x0, 0x3}) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300f00001e000100000000000000000007000000ddcd19708a49ecae298bca66afab9ec1f6aec6e8708db6d4cad08665f3d809e9a841218f03fe5cb9d7f1105113e250de61419aceb760a97a3713099c1f4280f61370c381f8963b57c04f964611140370ef43bd80f44acbe0d375779c8027684f23015cc21e6a0424c0780bf5dd3d156151a7a273260000000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090002000000"], 0x30}}, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x1000)=nil) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, r2, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/99, 0x63, 0x91e) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028000000000006907800000000e000000100010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0xfe, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0x8, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x60000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x4, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x3000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x7ffffffd, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x6001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x51ad96a181f630bf, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}}, 0x4000050) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f00000000c0)={0x0, 0xffff, 0x6c, &(0x7f0000000040)={0x6c, 0x0, {0x1, 0xb, 0xc, 0x4, 0x3, 0x10, 0x1000, 0x5d, 0x147}, {0x2, 0xfffffff8, 0x2, 0x7fffffff, 0x100}, {0x1, 0x28b2, 0x3, 0x1}, {0x6, 0x3, 0x7fff}}}) syz_open_dev$ublk_chdev(&(0x7f0000000000), r9, 0x270000) 7.942788955s ago: executing program 1 (id=46): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 7.76044626s ago: executing program 0 (id=48): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x96a9f75def4b72a5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) 7.734897311s ago: executing program 1 (id=49): socket$nl_xfrm(0x10, 0x3, 0x6) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.417631239s ago: executing program 1 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 7.34895413s ago: executing program 2 (id=53): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f00330000020000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 7.32470853s ago: executing program 1 (id=54): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYBLOB="cc64920775a500e3dbc717b796c7149a4ef4d72cf80020b4a5b2a1de632d3ca027c80e8caae1d658a868d384f8f47c3139041c2adebd2310a986f50b8e39167a49665d22db1390fbb436678d0ad7df5067e138398c820c16ede693d3bd7458eede06aed185e1105cb63d01d46b7f79ff26db3dac5ed1589898f016d3504b6723bd0f4a5e2e8573217a1f0f13434b118d064830ee0d2948f23ac999e79d8400bd413b8b7e141a172529525ee725e629cab6f61533c0d77fa0aceb738165f3b368d66c8cd17e41041ef70361a2f5ab32fae1e405497d8103a220aa2f87a2a1189393633961786b9e8ac2138a5dff304abe28780496c5", @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="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", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_rxfh_indir={0x38, 0x1, [0x1]}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000240), 0x24202, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r6, 0x8108551b, &(0x7f0000002a40)) syz_open_procfs(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0xca, 0xac5) 7.221812533s ago: executing program 3 (id=55): setrlimit(0x7, 0x0) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) 7.124854995s ago: executing program 3 (id=56): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="010000000000040000000100000024000300"/41], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 7.062017097s ago: executing program 2 (id=57): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) flistxattr(r1, 0x0, 0x58) 6.909584861s ago: executing program 3 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) 6.138528619s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x5}, {0x20, 0x3}}, 0x24, 0x0) 6.11754126s ago: executing program 2 (id=60): mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x4212, r0, 0x58, &(0x7f0000000080)) 5.438898547s ago: executing program 0 (id=61): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x23, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.705769429s ago: executing program 0 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 3.084804234s ago: executing program 1 (id=63): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) close(0x3) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.484104319s ago: executing program 0 (id=64): setrlimit(0x7, 0x0) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) 2.483941009s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x149100, 0x80) lseek(r0, 0x8, 0x0) 1.990813831s ago: executing program 0 (id=66): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x4c) 1.945542792s ago: executing program 2 (id=67): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYBLOB="cc64920775a500e3dbc717b796c7149a4ef4d72cf80020b4a5b2a1de632d3ca027c80e8caae1d658a868d384f8f47c3139041c2adebd2310a986f50b8e39167a49665d22db1390fbb436678d0ad7df5067e138398c820c16ede693d3bd7458eede06aed185e1105cb63d01d46b7f79ff26db3dac5ed1589898f016d3504b6723bd0f4a5e2e8573217a1f0f13434b118d064830ee0d2948f23ac999e79d8400bd413b8b7e141a172529525ee725e629cab6f61533c0d77fa0aceb738165f3b368d66c8cd17e41041ef70361a2f5ab32fae1e405497d8103a220aa2f87a2a1189393633961786b9e8ac2138a5dff304abe28780496c5", @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="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", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_rxfh_indir={0x38, 0x1, [0x1]}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000240), 0x24202, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r6, 0x8108551b, &(0x7f0000002a40)) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0xca, 0xac5) 1.899311803s ago: executing program 3 (id=68): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x7}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="00030400003304034a04"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, &(0x7f00000001c0)={0x40, 0x8, 0x6, "fde61e0ee4a6"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$midi(0x0, 0xbd, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x1, 0x1, 0x3, 0x20, 0x11, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x1, 0x1, [{0xf8, 0xf}], 0xc}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}], [{{0x9, 0x5, 0x5, 0x3, 0x40, 0x9, 0x9, 0x8, {0xd, 0x25, 0x1, 0x9, "19481798b171e962fa"}}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0x4, 0x8f, {0x9, 0x25, 0x1, 0x5, "272ed6eae9"}}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0xcd, 0x10, 0x81, {0xc, 0x25, 0x1, 0x8, "f35be1744a7d4244"}}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0xe, 0xd, 0x6, {0xc, 0x25, 0x1, 0x8, "8c385e195c3a15b9"}}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xbe, 0x40, 0x9, {0xa, 0x25, 0x1, 0x6, "156d8e3bdf39"}}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0x4, 0x1, {0x6, 0x25, 0x1, 0x2, "ab06"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x2, 0xef, 0x1, 0x0, 0xa0}, 0x26, &(0x7f0000000540)={0x5, 0xf, 0x26, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x57, 0xfffd}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x7, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xfd, 0xec, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0xbd, &(0x7f0000000580)=@string={0xbd, 0x3, "9e1e97b7ba8ccd2eeef1b2b28c96f8815195935b61fc31f9e7348488098ac8418586927173fd39a431e5952cc3448eb3fdf4b66029412cb0c384eab10f424c35a105890605166194c94565cb653a273292c4ae8f8e105f4f4d594c2f6ee2a17a52c59793967fcb8d8aecf905da83c427ac368783120dd2de9f7ae08a98f4be30c5c15f107b1056b398ec250807a23b127f90197b820427d8c07c07861d4d364498c17606dcd7ee6902af37db9d4c31059a9c0edf53a97ecbd768de"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io(r3, 0x0, &(0x7f0000002280)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x2b, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r5, &(0x7f0000000000)='255\x00', 0x4) getpeername$packet(r4, 0x0, 0x0) getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc810) sendmsg$netlink(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.576129501s ago: executing program 0 (id=69): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) listen(r0, 0x1000007) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, @in6={0xa, 0x4e21, 0x80fffe, @ipv4={'\x00', '\xff\xff', @local}, 0xa}]}, &(0x7f00000000c0)=0x10) 0s ago: executing program 2 (id=70): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x2, 0xfffffffe}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0xf0cec0b1beb5cba6, 0x30, 0x5b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5e, 0x2, 0x0, {0xa, 0x25, 0x25, 0x9, 0xa7, 0x5e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0xa, 0x25, 0x25, 0x3, 0x6, 0x4}}}}}}}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120001000000000904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffa, 0x88002) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000340)=""/159) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x20009, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x9, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x4, 0x7fffffff, 0x154, 0x9, 0x6, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xeffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x8, 0x10, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x2, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0xec33, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x7ff, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x2, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x3, 0xa, 0x80000001, 0x35, 0x80000001, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0xb9e6, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0x200e8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x8001, 0x9, 0x4, 0x0, 0x8000, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0x5, 0x6, 0x7, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0x0, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c73, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x1002, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0xfff, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x80, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0x1, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0xfffffff5, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x3, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x80, 0x2, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0xa, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xe, 0x7f53, 0x1ff, 0x5, 0xffffffff, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x80000000, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x4, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff1, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0xfa, 0x8, 0x5, 0x7, 0x0, 0x5, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0x7, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x5, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. syzkaller login: [ 83.787828][ T5766] cgroup: Unknown subsys name 'net' [ 83.930015][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.652601][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.522475][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.530599][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.538228][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.546702][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.555376][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.559849][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.564636][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.577428][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.578402][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.591862][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.592792][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.604359][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.615958][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.616756][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.625991][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.637718][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.639533][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.652858][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.668592][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.677407][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.685163][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.693046][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.711904][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.720281][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.264582][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.388211][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.480701][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.488828][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.498404][ T5780] bridge_slave_0: entered allmulticast mode [ 88.506273][ T5780] bridge_slave_0: entered promiscuous mode [ 88.521689][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.528892][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.536496][ T5780] bridge_slave_1: entered allmulticast mode [ 88.544686][ T5780] bridge_slave_1: entered promiscuous mode [ 88.592497][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.634952][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.642436][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.649704][ T5778] bridge_slave_0: entered allmulticast mode [ 88.657582][ T5778] bridge_slave_0: entered promiscuous mode [ 88.699417][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.708065][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.716958][ T5778] bridge_slave_1: entered allmulticast mode [ 88.724778][ T5778] bridge_slave_1: entered promiscuous mode [ 88.756258][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.769324][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.843521][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.878328][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.896749][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.913620][ T5780] team0: Port device team_slave_0 added [ 88.948338][ T5780] team0: Port device team_slave_1 added [ 88.996397][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.003717][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.011271][ T5785] bridge_slave_0: entered allmulticast mode [ 89.018785][ T5785] bridge_slave_0: entered promiscuous mode [ 89.044585][ T5778] team0: Port device team_slave_0 added [ 89.055953][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.063017][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.089615][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.110838][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.121424][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.129052][ T5785] bridge_slave_1: entered allmulticast mode [ 89.136983][ T5785] bridge_slave_1: entered promiscuous mode [ 89.146075][ T5778] team0: Port device team_slave_1 added [ 89.153783][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.160817][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.187283][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.257294][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.270672][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.328019][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.335559][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.363519][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.413463][ T5785] team0: Port device team_slave_0 added [ 89.420317][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.430373][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.461937][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.486120][ T5780] hsr_slave_0: entered promiscuous mode [ 89.494045][ T5780] hsr_slave_1: entered promiscuous mode [ 89.503391][ T5785] team0: Port device team_slave_1 added [ 89.524600][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.532321][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.539606][ T5779] bridge_slave_0: entered allmulticast mode [ 89.547060][ T5779] bridge_slave_0: entered promiscuous mode [ 89.555792][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.563100][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.570402][ T5779] bridge_slave_1: entered allmulticast mode [ 89.577802][ T5779] bridge_slave_1: entered promiscuous mode [ 89.650647][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.657822][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.684885][ T5790] Bluetooth: hci2: command tx timeout [ 89.685022][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.704557][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.711738][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.738180][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.761794][ T5790] Bluetooth: hci0: command tx timeout [ 89.761824][ T5789] Bluetooth: hci1: command tx timeout [ 89.762060][ T5789] Bluetooth: hci3: command tx timeout [ 89.786681][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.802174][ T5778] hsr_slave_0: entered promiscuous mode [ 89.809471][ T5778] hsr_slave_1: entered promiscuous mode [ 89.816327][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.824307][ T5778] Cannot create hsr debugfs directory [ 89.873997][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.949578][ T5779] team0: Port device team_slave_0 added [ 89.969859][ T5785] hsr_slave_0: entered promiscuous mode [ 89.976930][ T5785] hsr_slave_1: entered promiscuous mode [ 89.983793][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.991561][ T5785] Cannot create hsr debugfs directory [ 90.010792][ T5779] team0: Port device team_slave_1 added [ 90.125840][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.133062][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.166244][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.180532][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.189164][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.215775][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.428374][ T5779] hsr_slave_0: entered promiscuous mode [ 90.437459][ T5779] hsr_slave_1: entered promiscuous mode [ 90.444192][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.451977][ T5779] Cannot create hsr debugfs directory [ 90.524403][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.555786][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.571999][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.617894][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.724346][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.772274][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.784571][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.821541][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.882696][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.902928][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.926540][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.959699][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.037372][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.053582][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.073820][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.086173][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.202154][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.218243][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.286006][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.300138][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.325519][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.333019][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.390722][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.397995][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.409663][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.417119][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.432156][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.439566][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.464549][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.503010][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.556224][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.563462][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.587775][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.625754][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.640020][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.647351][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.707399][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.762242][ T5789] Bluetooth: hci2: command tx timeout [ 91.782997][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.790204][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.841433][ T5789] Bluetooth: hci3: command tx timeout [ 91.842464][ T5786] Bluetooth: hci0: command tx timeout [ 91.847028][ T5789] Bluetooth: hci1: command tx timeout [ 91.869733][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.901208][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.930394][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.937694][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.335577][ T789] cfg80211: failed to load regulatory.db [ 92.341041][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.426329][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.585547][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.603822][ T5778] veth0_vlan: entered promiscuous mode [ 92.653094][ T5778] veth1_vlan: entered promiscuous mode [ 92.660147][ T5780] veth0_vlan: entered promiscuous mode [ 92.699786][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.719996][ T5780] veth1_vlan: entered promiscuous mode [ 92.788841][ T5778] veth0_macvtap: entered promiscuous mode [ 92.810242][ T5785] veth0_vlan: entered promiscuous mode [ 92.829257][ T5778] veth1_macvtap: entered promiscuous mode [ 92.873695][ T5785] veth1_vlan: entered promiscuous mode [ 92.884447][ T5780] veth0_macvtap: entered promiscuous mode [ 92.899777][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.930692][ T5780] veth1_macvtap: entered promiscuous mode [ 92.942748][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.966833][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.980120][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989773][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001818][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.033949][ T5779] veth0_vlan: entered promiscuous mode [ 93.054455][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.067336][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.080095][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.108508][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.119506][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.133276][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.168396][ T5785] veth0_macvtap: entered promiscuous mode [ 93.180391][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.189881][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.199495][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.209060][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.220713][ T5779] veth1_vlan: entered promiscuous mode [ 93.237175][ T5785] veth1_macvtap: entered promiscuous mode [ 93.310610][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.322940][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.333099][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.343659][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.356283][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.402178][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.419612][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.430693][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.442383][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.454429][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.477222][ T5779] veth0_macvtap: entered promiscuous mode [ 93.488795][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.517848][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.528181][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.538880][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549223][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.559075][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.595724][ T5779] veth1_macvtap: entered promiscuous mode [ 93.645910][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.658352][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.769326][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.778986][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.799225][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.801657][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.817205][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.828436][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.838818][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.849717][ T5789] Bluetooth: hci2: command tx timeout [ 93.855346][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.867241][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.880088][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.916315][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.922443][ T5789] Bluetooth: hci1: command tx timeout [ 93.928389][ T5790] Bluetooth: hci0: command tx timeout [ 93.931825][ T5789] Bluetooth: hci3: command tx timeout [ 93.956826][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.981201][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.995440][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.007177][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.019856][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.054497][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063671][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.073410][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.084382][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.109092][ T5851] bridge1: entered promiscuous mode [ 94.114584][ T5851] bridge1: entered allmulticast mode [ 94.136505][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.163318][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.176347][ T5851] 9pnet_virtio: no channels available for device syz [ 94.214905][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.234068][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.288877][ T3455] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.382807][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.410844][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.502937][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.510854][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.673953][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.696891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.932038][ T5786] Bluetooth: hci2: command tx timeout [ 96.001382][ T5786] Bluetooth: hci0: command tx timeout [ 96.003147][ T5089] Bluetooth: hci1: command tx timeout [ 96.012427][ T5789] Bluetooth: hci3: command tx timeout [ 96.322772][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 96.330101][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.683285][ T5884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.743382][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.765236][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.743267][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.756916][ T5924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.780301][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 98.789992][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 101.027308][ T5935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 101.791753][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.145057][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 102.248351][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.259019][ T5822] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.268537][ T5822] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 102.293124][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.363683][ T5822] usb 4-1: config 0 descriptor?? [ 102.440580][ T5953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.448614][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 102.464076][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 102.673980][ T5967] loop8: detected capacity change from 0 to 7 [ 102.705521][ T5967] Dev loop8: unable to read RDB block 7 [ 102.719298][ T5964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39'. [ 102.740364][ T5967] loop8: unable to read partition table [ 102.749362][ T5967] loop8: partition table beyond EOD, truncated [ 102.768601][ T5967] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.020207][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 104.026996][ T5981] Bluetooth: MGMT ver 1.22 [ 104.102319][ T5943] Set syz1 is full, maxelem 6117 reached [ 104.144604][ T5826] usb 4-1: USB disconnect, device number 2 [ 104.334319][ T5987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.358003][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.368407][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.428235][ T5994] tipc: Started in network mode [ 104.435229][ T5994] tipc: Node identity 2000004, cluster identity 4711 [ 104.442558][ T5994] tipc: Node number set to 33554436 [ 107.037736][ T6023] jffs2: notice: (6023) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.946235][ T6023] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 109.549943][ T5789] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 109.577614][ T5789] Bluetooth: hci1: Injecting HCI hardware error event [ 109.607796][ T5789] Bluetooth: hci1: hardware error 0x00 [ 109.816660][ T6019] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 109.969912][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 110.306022][ T5822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.503691][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.011657][ T5789] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 112.014756][ T5822] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 112.072176][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.203701][ T5822] as10x_usb: device has been detected [ 112.210327][ T5822] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 112.306822][ T5822] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 112.331380][ T789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.362647][ T6038] ------------[ cut here ]------------ [ 112.368851][ T6038] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 112.380709][ T6038] WARNING: CPU: 0 PID: 6038 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 112.396306][ T6038] Modules linked in: [ 112.400273][ T6038] CPU: 0 PID: 6038 Comm: syz.1.63 Not tainted syzkaller #0 [ 112.407659][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.417822][ T6038] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 112.423224][ T6038] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d b1 a1 f4 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b6 ca 8a 48 c7 c6 20 b7 ca 8a e8 d8 2d b9 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 112.442945][ T6038] RSP: 0018:ffffc900047ff580 EFLAGS: 00010246 [ 112.449165][ T6038] RAX: 34977504bf572600 RBX: ffff88807ac90010 RCX: 0000000000080000 [ 112.457241][ T6038] RDX: ffffc9000d52a000 RSI: 000000000000327b RDI: 000000000000327c [ 112.465363][ T6038] RBP: ffffc900047ff6d8 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 112.474580][ T6038] R10: dffffc0000000000 R11: ffffed10171c518b R12: 1ffff920008ffec0 [ 112.482746][ T6038] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 112.490764][ T6038] FS: 00007f6248ecc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 112.500130][ T6038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.507018][ T6038] CR2: 0000563b0f59dcb8 CR3: 000000007af64000 CR4: 00000000003506f0 [ 112.515115][ T6038] Call Trace: [ 112.518449][ T6038] [ 112.521465][ T6038] ? as102_stream_ctrl+0x27/0xb0 [ 112.526485][ T6038] ? trace_raw_output_contention_end+0xd0/0xd0 [ 112.532738][ T6038] ? mutex_lock_nested+0x20/0x20 [ 112.537727][ T6038] as102_stream_ctrl+0x27/0xb0 [ 112.541602][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 112.542687][ T6038] dvb_frontend_open+0x7f5/0x13a0 [ 112.552823][ T6038] ? dvb_frontend_compat_ioctl+0x8a0/0x8a0 [ 112.558714][ T6038] dvb_device_open+0x270/0x360 [ 112.563689][ T6038] chrdev_open+0x58c/0x600 [ 112.568966][ T6038] ? cd_forget+0x160/0x160 [ 112.573578][ T6038] ? fsnotify_perm+0x3ed/0x5e0 [ 112.578408][ T6038] do_dentry_open+0x880/0x14b0 [ 112.583272][ T6038] ? cd_forget+0x160/0x160 [ 112.587748][ T6038] path_openat+0x284f/0x3270 [ 112.592440][ T6038] ? do_sys_openat2+0xda/0x1d0 [ 112.597255][ T6038] ? __x64_sys_openat+0x139/0x160 [ 112.602379][ T6038] ? verify_lock_unused+0x140/0x140 [ 112.607628][ T6038] ? do_filp_open+0x430/0x430 [ 112.612489][ T6038] do_filp_open+0x1f2/0x430 [ 112.617135][ T6038] ? vfs_tmpfile+0x620/0x620 [ 112.621805][ T6038] ? _raw_spin_unlock+0x28/0x40 [ 112.626697][ T6038] ? alloc_fd+0x590/0x640 [ 112.631142][ T6038] do_sys_openat2+0x134/0x1d0 [ 112.635878][ T6038] ? do_sys_open+0xe0/0xe0 [ 112.640343][ T6038] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 112.646760][ T6038] ? lock_chain_count+0x20/0x20 [ 112.651765][ T6038] __x64_sys_openat+0x139/0x160 [ 112.656669][ T6038] do_syscall_64+0x55/0xb0 [ 112.661206][ T6038] ? clear_bhb_loop+0x40/0x90 [ 112.665936][ T6038] ? clear_bhb_loop+0x40/0x90 [ 112.671599][ T6038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.677583][ T6038] RIP: 0033:0x7f6247f5e90e [ 112.682169][ T6038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.701873][ T6038] RSP: 002b:00007f6248ecbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.710351][ T6038] RAX: ffffffffffffffda RBX: 00007f6248ecc6c0 RCX: 00007f6247f5e90e [ 112.718421][ T6038] RDX: 0000000000000802 RSI: 00007f6248ecbc00 RDI: ffffffffffffff9c [ 112.726491][ T6038] RBP: 00007f6248ecbc00 R08: 0000000000000000 R09: 0000000000000000 [ 112.734542][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 112.742574][ T6038] R13: 00007f6248226038 R14: 00007f6248225fa0 R15: 00007ffdca916e38 [ 112.750607][ T6038] [ 112.753692][ T6038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.761012][ T6038] CPU: 0 PID: 6038 Comm: syz.1.63 Not tainted syzkaller #0 [ 112.768269][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.778473][ T6038] Call Trace: [ 112.781779][ T6038] [ 112.784784][ T6038] dump_stack_lvl+0x18c/0x250 [ 112.789544][ T6038] ? show_regs_print_info+0x20/0x20 [ 112.794804][ T6038] ? load_image+0x420/0x420 [ 112.799373][ T6038] panic+0x2ca/0x720 [ 112.803333][ T6038] ? bpf_jit_dump+0xd0/0xd0 [ 112.807946][ T6038] __warn+0x2e0/0x470 [ 112.811984][ T6038] ? __mutex_lock+0xb48/0xc80 [ 112.816732][ T6038] ? __mutex_lock+0xb48/0xc80 [ 112.821475][ T6038] report_bug+0x2be/0x4f0 [ 112.825876][ T6038] ? __mutex_lock+0xb48/0xc80 [ 112.830632][ T6038] ? __mutex_lock+0xb48/0xc80 [ 112.835369][ T6038] ? __mutex_lock+0xb4a/0xc80 [ 112.840124][ T6038] handle_bug+0xcf/0x120 [ 112.844417][ T6038] exc_invalid_op+0x1a/0x50 [ 112.849002][ T6038] asm_exc_invalid_op+0x1a/0x20 [ 112.853960][ T6038] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 112.859296][ T6038] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d b1 a1 f4 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b6 ca 8a 48 c7 c6 20 b7 ca 8a e8 d8 2d b9 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 112.878963][ T6038] RSP: 0018:ffffc900047ff580 EFLAGS: 00010246 [ 112.885082][ T6038] RAX: 34977504bf572600 RBX: ffff88807ac90010 RCX: 0000000000080000 [ 112.893113][ T6038] RDX: ffffc9000d52a000 RSI: 000000000000327b RDI: 000000000000327c [ 112.901141][ T6038] RBP: ffffc900047ff6d8 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 112.909160][ T6038] R10: dffffc0000000000 R11: ffffed10171c518b R12: 1ffff920008ffec0 [ 112.917169][ T6038] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 112.925206][ T6038] ? as102_stream_ctrl+0x27/0xb0 [ 112.930197][ T6038] ? trace_raw_output_contention_end+0xd0/0xd0 [ 112.936414][ T6038] ? mutex_lock_nested+0x20/0x20 [ 112.941428][ T6038] as102_stream_ctrl+0x27/0xb0 [ 112.946251][ T6038] dvb_frontend_open+0x7f5/0x13a0 [ 112.951346][ T6038] ? dvb_frontend_compat_ioctl+0x8a0/0x8a0 [ 112.957206][ T6038] dvb_device_open+0x270/0x360 [ 112.962013][ T6038] chrdev_open+0x58c/0x600 [ 112.966487][ T6038] ? cd_forget+0x160/0x160 [ 112.970952][ T6038] ? fsnotify_perm+0x3ed/0x5e0 [ 112.975766][ T6038] do_dentry_open+0x880/0x14b0 [ 112.980597][ T6038] ? cd_forget+0x160/0x160 [ 112.985102][ T6038] path_openat+0x284f/0x3270 [ 112.989768][ T6038] ? do_sys_openat2+0xda/0x1d0 [ 112.994588][ T6038] ? __x64_sys_openat+0x139/0x160 [ 112.999679][ T6038] ? verify_lock_unused+0x140/0x140 [ 113.004934][ T6038] ? do_filp_open+0x430/0x430 [ 113.009654][ T6038] do_filp_open+0x1f2/0x430 [ 113.014213][ T6038] ? vfs_tmpfile+0x620/0x620 [ 113.018859][ T6038] ? _raw_spin_unlock+0x28/0x40 [ 113.023744][ T6038] ? alloc_fd+0x590/0x640 [ 113.028115][ T6038] do_sys_openat2+0x134/0x1d0 [ 113.032844][ T6038] ? do_sys_open+0xe0/0xe0 [ 113.037338][ T6038] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 113.043394][ T6038] ? lock_chain_count+0x20/0x20 [ 113.048292][ T6038] __x64_sys_openat+0x139/0x160 [ 113.053209][ T6038] do_syscall_64+0x55/0xb0 [ 113.057667][ T6038] ? clear_bhb_loop+0x40/0x90 [ 113.062379][ T6038] ? clear_bhb_loop+0x40/0x90 [ 113.067095][ T6038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.073175][ T6038] RIP: 0033:0x7f6247f5e90e [ 113.077633][ T6038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.097365][ T6038] RSP: 002b:00007f6248ecbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.105818][ T6038] RAX: ffffffffffffffda RBX: 00007f6248ecc6c0 RCX: 00007f6247f5e90e [ 113.113823][ T6038] RDX: 0000000000000802 RSI: 00007f6248ecbc00 RDI: ffffffffffffff9c [ 113.121849][ T6038] RBP: 00007f6248ecbc00 R08: 0000000000000000 R09: 0000000000000000 [ 113.129897][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 113.137931][ T6038] R13: 00007f6248226038 R14: 00007f6248225fa0 R15: 00007ffdca916e38 [ 113.145970][ T6038] [ 113.149608][ T6038] Kernel Offset: disabled [ 113.153952][ T6038] Rebooting in 86400 seconds..