last executing test programs: 34.936620246s ago: executing program 0 (id=36): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r1, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda8d) accept4$inet(r2, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) 31.463363494s ago: executing program 0 (id=43): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000001200050928bd7000fedbdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="000001000520000031000000040000001400010007"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 31.269745201s ago: executing program 0 (id=44): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = epoll_create(0x752) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x0, 0xffff, 0x0, 0x5, "6b77a9b8677a6bf2b5149c8de58da6741336b7", 0x7, 0x6}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80002010}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000002c0), 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user:'}, 0x1b, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x780, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0xffff40d1, 0xfefffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000, 0xffffffff, 0x0, 0xa, 0x100, 0x0, 0x2}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000440)={0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x3, 0x43, @string={0x43, 0x3, "04d3b68733c7e6b6d4f512fffdb5ff1eaa40f4e1e57c054d226fe6fe511d25d249feaa561fafb2994ba38fe3761143c75c71e5f6b1b845be355987cf79a289d5db"}}}, &(0x7f0000000640)={0x18, &(0x7f0000000480)={0x20, 0x3, 0x8e, "b77313cd2014517e30ca5902d2c58e5526dd6a4c46ba37e7dedeb9f7162aa741351ed16715d24ec39041590cfb0496446259afea0ee817ed152eb52492d32c0a0fe57a25841609091e0038eb5cb2fada1cd7382b0b5610062f2c2057f261eed282c52c9e14b238f99bc93cd715da6fbc7388ca47ff267354b641ba2af3b8ae0629f599874189a6921c3a0370cdb4"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0x5, 0x6, "eb8517f44960"}, &(0x7f0000000600)}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, 0x0, 0x25000c41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 26.080100377s ago: executing program 0 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "00000013fd00", "5517bd0fa5ecf3d606e5f9c39dd1e9fd", "03c0fd7d", "657e2814e07deaea"}, 0x28) sendmsg$inet(r0, 0x0, 0x0) 25.58845181s ago: executing program 0 (id=55): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000001200050928bd7000fedbdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="00000100052000003100000004000000140001000714"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 25.371005241s ago: executing program 0 (id=56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x40000028, 0x3, &(0x7f00000003c0)=""/74, &(0x7f0000000280)=0x34) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x94, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x44f00, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) fsopen(0x0, 0x0) gettid() add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x48, 0xfffffffffffffffe) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x205c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @private2, 0x1000}, 0x1c) ftruncate(r6, 0x800000002) close(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fcntl$notify(r7, 0x402, 0x8000003d) 16.940843288s ago: executing program 3 (id=73): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000240)=0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002000000ff6a05290040000102030109022400010109a009270400040103010310000205670275a4b254a40abf8bbc6e79b9d4655c00"], &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x6, 0x60, 0xaf, 0x7}, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3001}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xfffffffffffffffe}]}}}]}, 0x4c}}, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000900)={r7, 0x0, 0x2, &(0x7f0000000300)={@align=0x8, {0x8, 0xeb25, 0x5, 0x6}}, 0x0, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000008c0)=0x5e7}) io_uring_register$IORING_REGISTER_FILES2(r10, 0xd, &(0x7f0000000f40)={0x4, 0x1, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/114, 0x72}, {&(0x7f00000009c0)=""/229, 0xe5}, {&(0x7f0000000cc0)=""/249, 0xf9}, {&(0x7f0000000dc0)=""/202, 0xca}], &(0x7f0000000f00)}, 0x20) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) 14.388407902s ago: executing program 4 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecfda34c9d3f849c3ae87765e62ab65118874d4b926b44"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 14.034173193s ago: executing program 1 (id=82): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0xc000200b}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) epoll_pwait(r3, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.349867518s ago: executing program 4 (id=83): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 11.658080399s ago: executing program 4 (id=84): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40e0, 0x0) 10.266760477s ago: executing program 32 (id=56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x40000028, 0x3, &(0x7f00000003c0)=""/74, &(0x7f0000000280)=0x34) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x94, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x44f00, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) fsopen(0x0, 0x0) gettid() add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x48, 0xfffffffffffffffe) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x205c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @private2, 0x1000}, 0x1c) ftruncate(r6, 0x800000002) close(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fcntl$notify(r7, 0x402, 0x8000003d) 10.242429111s ago: executing program 4 (id=86): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @loopback, @remote}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 9.104041087s ago: executing program 1 (id=88): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000010005200000310000000400000014000100071414"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 9.044044727s ago: executing program 2 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8.813026053s ago: executing program 1 (id=90): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0xa, 0x3, 0xffffffff) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00", 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) 8.762173178s ago: executing program 3 (id=91): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="9905000000007464000100000000000200e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}, {0x0}], 0x2}}], 0x1, 0x0) 8.750638293s ago: executing program 4 (id=92): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000240)=0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002000000ff6a05290040000102030109022400010109a009270400040103010310000205670275a4b254a40abf8bbc6e79b9d4655c00"], &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x6, 0x60, 0xaf, 0x7}, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3001}}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xfffffffffffffffe}]}}}]}, 0x4c}}, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) 6.166717544s ago: executing program 2 (id=93): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32], 0x20) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r0, 0x0, 0x0, 0x800) socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) fanotify_init(0x200, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r2, 0x0, 0x8, 'syz1\x00', 0x0}) 4.090983569s ago: executing program 2 (id=94): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecfda34c9d3f849c3ae87765e62ab65118874d4b926b44"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 4.004660857s ago: executing program 1 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x2, 0x3, 0xff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, 0x0, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) socket(0x2, 0x3, 0xff) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 3.136177701s ago: executing program 2 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_dev$mtd(&(0x7f0000000080), 0x952, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f00000001c0)={0x9, 0x9}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r8 = socket(0x8, 0x3, 0x4d6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r9, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r13, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r13}}, 0x18}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "00000013fd00", "5517bd0fa5ecf3d606e5f9c39dd1e9fd", "03c0fd7d", "657e2814e07deaea"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.932134618s ago: executing program 1 (id=97): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = epoll_create(0x752) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x0, 0xffff, 0x0, 0x5, "6b77a9b8677a6bf2b5149c8de58da6741336b7", 0x7, 0x6}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80002010}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000002c0), 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user:'}, 0x1b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000840)={0x20, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r5, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x780, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0xffff40d1, 0xfefffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000, 0xffffffff, 0x0, 0xa, 0x100, 0x0, 0x2}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000440)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001f4000000f40dd293906132bab3d396691f210aafce824e062a2f5a4b14115dd1d7161944658b7f41d6e6cb47e16699d3ad9337bd07508d655aa4c0547973d63438febea5db9ec7713afeaa2bd49eba05d1e59d265add49285c1321ce7576b21ac3cd5d2dc4d359ffea895cbbd49edb3e8944d2035b67c765e054eb908155bc134f30f99a16d5fe040857bd2f9746101a5f8bcadb158e37a305bb9e5316a462f4520caae6e5b5a6741f4cc355610d433d67c6bc47c9edab5ea25c119b8e64ad195eddd145238f6258c4d4ebce69fd85506cb89d1bdc41147f42994f851124e77688cbc19f196f9598ddbba33098b7"], &(0x7f00000003c0)={0x0, 0x3, 0x43, @string={0x43, 0x3, "04d3b68733c7e6b6d4f512fffdb5ff1eaa40f4e1e57c054d226fe6fe511d25d249feaa561fafb2994ba38fe3761143c75c71e5f6b1b845be355987cf79a289d5db"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x20, 0x3, 0x8e, "b77313cd2014517e30ca5902d2c58e5526dd6a4c46ba37e7dedeb9f7162aa741351ed16715d24ec39041590cfb0496446259afea0ee817ed152eb52492d32c0a0fe57a25841609091e0038eb5cb2fada1cd7382b0b5610062f2c2057f261eed282c52c9e14b238f99bc93cd715da6fbc7388ca47ff267354b641ba2af3b8ae0629f599874189a6921c3a0370cdb4"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0x5, 0x6, "eb8517f44960"}, &(0x7f0000000600)}) write$char_usb(r6, 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x25000c41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.220998842s ago: executing program 3 (id=98): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000e0a010400000000000000000a0000000900010073797a31000000000900020073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.409198133s ago: executing program 3 (id=99): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000010005200000310000000400000014000100071414"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 1.278072418s ago: executing program 3 (id=100): r0 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r0, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0xfff) 1.22477179s ago: executing program 3 (id=101): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r1, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda8d) accept4$inet(r2, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.070244045s ago: executing program 1 (id=102): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xc000200b}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) epoll_pwait(r2, 0x0, 0x0, 0x4000a, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, 0x0, 0x2c740, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 478.132811ms ago: executing program 2 (id=103): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 279.397378ms ago: executing program 4 (id=104): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x80, {0x4, 0x21}, 0x14, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r6 = fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) r7 = fcntl$dupfd(r6, 0x0, r6) bind$inet(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={0x0}}, 0x8080) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000020120c300000000000000109022d00010000d00109040000020300030009218100fc0122280009058103ff03038102090502f91f000904"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) cachestat(r8, &(0x7f0000000040)={0x8, 0x1}, &(0x7f00000000c0), 0x0) 0s ago: executing program 2 (id=105): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902"], 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r1], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 91.982455][ T11] cfg80211: failed to load regulatory.db [ 93.397223][ T5588] cgroup: Unknown subsys name 'net' [ 93.659197][ T5588] cgroup: Unknown subsys name 'cpuset' [ 93.733538][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.801756][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.652514][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.682324][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.704378][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.726981][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.738666][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.750000][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.762367][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.762367][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.776670][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.779678][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.780509][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.789352][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.789672][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.803768][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.812201][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.886599][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.914262][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.915675][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.921999][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.956528][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.961508][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.995765][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.006891][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.039840][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.054601][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.925062][ T5613] Bluetooth: hci2: command tx timeout [ 100.925255][ T5623] Bluetooth: hci3: command tx timeout [ 101.093014][ T5613] Bluetooth: hci1: command tx timeout [ 101.094722][ T5623] Bluetooth: hci4: command tx timeout [ 101.163043][ T5623] Bluetooth: hci0: command tx timeout [ 101.709672][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.709832][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.710353][ T5608] bridge_slave_0: entered allmulticast mode [ 101.721863][ T5608] bridge_slave_0: entered promiscuous mode [ 101.762352][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.762477][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.762612][ T5610] bridge_slave_0: entered allmulticast mode [ 101.769419][ T5610] bridge_slave_0: entered promiscuous mode [ 101.807156][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.807282][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.807444][ T5609] bridge_slave_0: entered allmulticast mode [ 101.809472][ T5609] bridge_slave_0: entered promiscuous mode [ 101.818764][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.819125][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.819578][ T5608] bridge_slave_1: entered allmulticast mode [ 101.843416][ T5608] bridge_slave_1: entered promiscuous mode [ 101.882051][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.882196][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.882362][ T5610] bridge_slave_1: entered allmulticast mode [ 101.889881][ T5610] bridge_slave_1: entered promiscuous mode [ 101.895163][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.895481][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.903385][ T5611] bridge_slave_0: entered allmulticast mode [ 101.910386][ T5611] bridge_slave_0: entered promiscuous mode [ 101.921313][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.921642][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.940983][ T5609] bridge_slave_1: entered allmulticast mode [ 101.948369][ T5609] bridge_slave_1: entered promiscuous mode [ 101.994495][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.994626][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.994775][ T5607] bridge_slave_0: entered allmulticast mode [ 101.996652][ T5607] bridge_slave_0: entered promiscuous mode [ 101.998498][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.998617][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.999123][ T5611] bridge_slave_1: entered allmulticast mode [ 102.001105][ T5611] bridge_slave_1: entered promiscuous mode [ 102.087516][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.087664][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.087830][ T5607] bridge_slave_1: entered allmulticast mode [ 102.089957][ T5607] bridge_slave_1: entered promiscuous mode [ 102.145977][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.149943][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.198877][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.201587][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.217815][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.247717][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.251413][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.300282][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.305556][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.365571][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.402484][ T5608] team0: Port device team_slave_0 added [ 102.411906][ T5610] team0: Port device team_slave_0 added [ 102.452112][ T5609] team0: Port device team_slave_0 added [ 102.462638][ T5608] team0: Port device team_slave_1 added [ 102.471398][ T5610] team0: Port device team_slave_1 added [ 102.498942][ T5611] team0: Port device team_slave_0 added [ 102.501192][ T5609] team0: Port device team_slave_1 added [ 102.541234][ T5607] team0: Port device team_slave_0 added [ 102.548874][ T5611] team0: Port device team_slave_1 added [ 102.601197][ T5607] team0: Port device team_slave_1 added [ 102.636620][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.636633][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.636653][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.639061][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.639078][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.639116][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.738498][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.738516][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.738545][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.739995][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.740011][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.740049][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.742427][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.742437][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.742457][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.836583][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.836627][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.836700][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.857007][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.857050][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.857124][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.965511][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.965524][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.965543][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.966743][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.966758][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.966787][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.015874][ T5623] Bluetooth: hci3: command tx timeout [ 103.015966][ T5623] Bluetooth: hci2: command tx timeout [ 103.058752][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.058806][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.058878][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.163011][ T5613] Bluetooth: hci4: command tx timeout [ 103.163047][ T5613] Bluetooth: hci1: command tx timeout [ 103.242968][ T5623] Bluetooth: hci0: command tx timeout [ 103.652942][ T5608] hsr_slave_0: entered promiscuous mode [ 103.654633][ T5608] hsr_slave_1: entered promiscuous mode [ 103.666997][ T5610] hsr_slave_0: entered promiscuous mode [ 103.670259][ T5610] hsr_slave_1: entered promiscuous mode [ 103.672722][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 103.679342][ T5610] Cannot create hsr debugfs directory [ 103.734792][ T5609] hsr_slave_0: entered promiscuous mode [ 103.735739][ T5609] hsr_slave_1: entered promiscuous mode [ 103.736438][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 103.736456][ T5609] Cannot create hsr debugfs directory [ 103.777194][ T5611] hsr_slave_0: entered promiscuous mode [ 103.778143][ T5611] hsr_slave_1: entered promiscuous mode [ 103.778860][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 103.778877][ T5611] Cannot create hsr debugfs directory [ 103.807049][ T5607] hsr_slave_0: entered promiscuous mode [ 103.808051][ T5607] hsr_slave_1: entered promiscuous mode [ 103.808764][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 103.808781][ T5607] Cannot create hsr debugfs directory [ 104.915817][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.953862][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.975995][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.018034][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.038795][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.069194][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.084402][ T5623] Bluetooth: hci2: command tx timeout [ 105.084438][ T5623] Bluetooth: hci3: command tx timeout [ 105.107437][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.126069][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.246709][ T5613] Bluetooth: hci1: command tx timeout [ 105.246743][ T5613] Bluetooth: hci4: command tx timeout [ 105.277414][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.323058][ T5623] Bluetooth: hci0: command tx timeout [ 105.327052][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.331025][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.387239][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.392255][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.416807][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.441434][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.478780][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.601333][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.637535][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.642417][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.687567][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.693519][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.729119][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.760754][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.788756][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.930588][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.991677][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.008490][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.036421][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.050755][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.088834][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.123926][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.170150][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.206490][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.340593][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.386849][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.413621][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.456654][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.460406][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.484393][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.528642][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.543121][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.566470][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.602235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.602398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.658743][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.658832][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.695871][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.818413][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.878343][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.892108][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.892258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.949956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.950063][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.035815][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.088002][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.088215][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.108380][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.163284][ T5623] Bluetooth: hci3: command tx timeout [ 107.163296][ T5613] Bluetooth: hci2: command tx timeout [ 107.189019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.189248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.292309][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.333373][ T5613] Bluetooth: hci4: command tx timeout [ 107.333384][ T5623] Bluetooth: hci1: command tx timeout [ 107.395435][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.395605][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.404085][ T5623] Bluetooth: hci0: command tx timeout [ 107.429279][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.488897][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.489178][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.627060][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.720566][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.722337][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.825322][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.827064][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.321238][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.804019][ T5608] veth0_vlan: entered promiscuous mode [ 108.899124][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.947751][ T5608] veth1_vlan: entered promiscuous mode [ 109.211570][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.298205][ T5608] veth0_macvtap: entered promiscuous mode [ 109.343619][ T5608] veth1_macvtap: entered promiscuous mode [ 109.369749][ T5609] veth0_vlan: entered promiscuous mode [ 109.387074][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.490135][ T5609] veth1_vlan: entered promiscuous mode [ 109.535699][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.575317][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.604222][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.639821][ T5611] veth0_vlan: entered promiscuous mode [ 109.687474][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.697277][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.715860][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.739568][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.768604][ T5611] veth1_vlan: entered promiscuous mode [ 109.893539][ T5609] veth0_macvtap: entered promiscuous mode [ 110.004860][ T5609] veth1_macvtap: entered promiscuous mode [ 110.252329][ T5610] veth0_vlan: entered promiscuous mode [ 110.286944][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.370268][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.370918][ T5610] veth1_vlan: entered promiscuous mode [ 110.387719][ T5611] veth0_macvtap: entered promiscuous mode [ 110.415223][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.415251][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.478513][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.479852][ T5611] veth1_macvtap: entered promiscuous mode [ 110.502382][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.508928][ T5607] veth0_vlan: entered promiscuous mode [ 110.526730][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.571698][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.648611][ T5607] veth1_vlan: entered promiscuous mode [ 110.648770][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.648787][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.787645][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.937827][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.022323][ T5610] veth0_macvtap: entered promiscuous mode [ 111.153120][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.155670][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.156833][ T5610] veth1_macvtap: entered promiscuous mode [ 111.160874][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.206220][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.210037][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.210059][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.396094][ T5607] veth0_macvtap: entered promiscuous mode [ 111.695982][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.698090][ T5607] veth1_macvtap: entered promiscuous mode [ 111.801176][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.801200][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.919545][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.027575][ T998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.050873][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 112.084574][ T998] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.090366][ T998] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.098156][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.193900][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.193921][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.197620][ T998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.424976][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.620140][ T3404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.642007][ T3404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.732084][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.732108][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.732452][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.872340][ T1452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.113587][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 113.737297][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.737320][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.984804][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.984821][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.151439][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.151458][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.237275][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.237297][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.959294][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 116.323654][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.347980][ T5737] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.552304][ T5738] usb 1-1: Using ep0 maxpacket: 32 [ 116.605276][ T5738] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 116.605315][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 116.605335][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 116.605352][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 116.605371][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 116.608002][ T5737] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.608027][ T5737] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.608045][ T5737] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.608121][ T5737] usb 2-1: config 1 has no interface number 1 [ 116.608152][ T5737] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.608179][ T5737] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.741617][ T5738] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 116.741650][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.741670][ T5738] usb 1-1: Product: syz [ 116.741685][ T5738] usb 1-1: Manufacturer: syz [ 116.741699][ T5738] usb 1-1: SerialNumber: syz [ 116.810970][ T5737] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.810993][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.811008][ T5737] usb 2-1: Product: syz [ 116.811019][ T5737] usb 2-1: Manufacturer: syz [ 116.811029][ T5737] usb 2-1: SerialNumber: syz [ 117.052585][ T5738] usb 1-1: config 0 descriptor?? [ 117.675572][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 117.678085][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 117.841443][ T5826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.854820][ T5826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.112901][ T5737] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 118.112969][ T5737] usb 2-1: MIDIStreaming interface descriptor not found [ 118.704087][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.708191][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.713245][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.720015][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.725854][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.728384][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.738463][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.747108][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.751535][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.755830][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.758543][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.763190][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.767941][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.777001][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.798582][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.803688][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.805311][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.807799][ T5738] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 118.807938][ T5738] input input5: Timeout waiting for response from device. [ 119.068432][ T5738] usb 1-1: USB disconnect, device number 2 [ 120.543845][ T5863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17'. [ 120.552287][ T5737] usb 2-1: USB disconnect, device number 2 [ 121.057006][ T5872] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 121.535700][ T5877] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 122.882838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.486649][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.873971][ T5717] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.074944][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 124.115449][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 124.115485][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 124.115513][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 124.115537][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 124.115564][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 124.196564][ T5717] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 124.196596][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.196616][ T5717] usb 3-1: Product: syz [ 124.196631][ T5717] usb 3-1: Manufacturer: syz [ 124.196645][ T5717] usb 3-1: SerialNumber: syz [ 124.391088][ T5717] usb 3-1: config 0 descriptor?? [ 124.642505][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 124.652762][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 124.695765][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.696388][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.159973][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.160353][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.160746][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.161718][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.162161][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.178104][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.227529][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.228141][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.229978][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.230405][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.230813][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.231851][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.279093][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.279567][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.281460][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.281932][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.282420][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.313521][ T5717] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 125.313570][ T5717] input input6: Timeout waiting for response from device. [ 125.404449][ T5717] usb 3-1: USB disconnect, device number 2 [ 126.008134][ T36] audit: type=1800 audit(1783576769.791:2): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.30" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 127.012956][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.109896][ T36] audit: type=1800 audit(1783576770.901:3): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.36" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 127.230653][ T11] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.230678][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.230693][ T11] usb 3-1: Product: syz [ 127.230703][ T11] usb 3-1: Manufacturer: syz [ 127.230714][ T11] usb 3-1: SerialNumber: syz [ 127.988449][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 127.988522][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 127.988542][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 128.078936][ T11] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 128.453193][ T11] usb 3-1: USB disconnect, device number 3 [ 130.861681][ T5953] Zero length message leads to an empty skb [ 130.946956][ T5717] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.328085][ T5717] usb 1-1: Using ep0 maxpacket: 32 [ 131.360541][ T5717] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 131.360576][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 131.360602][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 131.360625][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 131.360650][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 132.115528][ T5717] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 132.115551][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.115566][ T5717] usb 1-1: Product: syz [ 132.115577][ T5717] usb 1-1: Manufacturer: syz [ 132.115587][ T5717] usb 1-1: SerialNumber: syz [ 132.206150][ T5717] usb 1-1: config 0 descriptor?? [ 132.495085][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 132.501063][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 132.520263][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.520896][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.695356][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.719784][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.723152][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.731887][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.739029][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.743340][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.747950][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.797413][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.797790][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.798128][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.799675][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.801533][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.803218][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.807971][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.812275][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.820947][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.832519][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.834469][ T5717] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 132.834583][ T5717] input input7: Timeout waiting for response from device. [ 132.929563][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929631][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.123944][ T5717] usb 1-1: USB disconnect, device number 3 [ 135.628460][ T5965] syz.4.48 (5965) used greatest stack depth: 18880 bytes left [ 136.892827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.912834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.922821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.932823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.942826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.952823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.962822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.972832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.535932][ T5717] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.694080][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 139.697060][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 139.697093][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 139.697124][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 139.697141][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 139.697161][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 139.702329][ T5717] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 139.702351][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.702365][ T5717] usb 4-1: Product: syz [ 139.702376][ T5717] usb 4-1: Manufacturer: syz [ 139.702386][ T5717] usb 4-1: SerialNumber: syz [ 139.834052][ T5738] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.835961][ T5717] usb 4-1: config 0 descriptor?? [ 140.013083][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 140.033970][ T5738] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 140.034003][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 140.034039][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 140.034064][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 140.034092][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 140.041323][ T5738] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 140.041355][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.041376][ T5738] usb 2-1: Product: syz [ 140.041391][ T5738] usb 2-1: Manufacturer: syz [ 140.041528][ T5738] usb 2-1: SerialNumber: syz [ 140.177865][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 140.179388][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 140.204075][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.211944][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.219929][ T5738] usb 2-1: config 0 descriptor?? [ 140.477655][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.478174][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.479071][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.479544][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.480581][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.520518][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.522586][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.530993][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.543776][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.544340][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.545232][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.575049][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.575530][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.575989][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.578912][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.579444][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.580138][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.580648][ T5717] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 140.580708][ T5717] input input8: Timeout waiting for response from device. [ 140.657892][ T5717] usb 4-1: USB disconnect, device number 2 [ 140.676644][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 140.676702][ T5738] input input9: Device does not respond to id packet M [ 140.767019][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.850867][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.043373][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.043427][ T5738] input input9: Device does not respond to id packet P [ 141.044697][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.044729][ T5738] input input9: Device does not respond to id packet B [ 141.045144][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.045175][ T5738] input input9: Device does not respond to id packet N [ 141.045532][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.046306][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.046659][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.049371][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 141.235637][ T5738] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 141.632952][ T5738] usb 2-1: USB disconnect, device number 3 [ 146.663701][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.746320][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.843375][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.930671][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.748440][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 151.163740][ T6094] syz.4.84 (6094): drop_caches: 2 [ 151.613058][ T6101] netlink: 'syz.4.86': attribute type 4 has an invalid length. [ 151.739020][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.757553][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.817508][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.823286][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.846578][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.450502][ T6058] bridge1: entered promiscuous mode [ 152.450537][ T6058] bridge1: entered allmulticast mode [ 152.542355][ T1449] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.590284][ T1449] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.616419][ T1449] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.616569][ T1449] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.814512][ T5623] Bluetooth: hci5: command tx timeout [ 156.843370][ T5623] Bluetooth: hci5: command tx timeout [ 158.241143][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.262603][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.820977][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 158.923002][ T5623] Bluetooth: hci5: command tx timeout [ 158.966289][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.022970][ T5738] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.045220][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.173600][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 159.184163][ T5738] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 159.184245][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 159.184317][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 159.184378][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 159.184449][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 159.272391][ T5738] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 159.272423][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.272443][ T5738] usb 2-1: Product: syz [ 159.272464][ T5738] usb 2-1: Manufacturer: syz [ 159.272475][ T5738] usb 2-1: SerialNumber: syz [ 159.320021][ T5738] usb 2-1: config 0 descriptor?? [ 159.481047][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 159.563332][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 159.644629][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 159.795713][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 159.821826][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 159.821879][ T5738] input input10: Device does not respond to id packet M [ 159.843326][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.845153][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.970155][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 159.970193][ T5738] input input10: Device does not respond to id packet P [ 159.972062][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 159.972108][ T5738] input input10: Device does not respond to id packet B [ 159.972547][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 159.972593][ T5738] input input10: Device does not respond to id packet N [ 159.973256][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 159.974766][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 159.978253][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 159.979272][ T5738] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 160.011832][ T5738] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 160.086963][ T5738] usb 2-1: USB disconnect, device number 4 [ 160.420123][ T36] audit: type=1800 audit(1783576804.211:4): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.101" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 160.933936][ T6127] bridge1: entered promiscuous mode [ 160.933969][ T6127] bridge1: entered allmulticast mode [ 160.957815][ T3404] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.003928][ T5623] Bluetooth: hci5: command tx timeout [ 161.052476][ T1171] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.052710][ T1171] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.052763][ T1171] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.043627][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.196188][ T11] usb 3-1: config 0 has no interfaces? [ 162.198155][ T11] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 162.198175][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.198190][ T11] usb 3-1: Product: syz [ 162.198200][ T11] usb 3-1: Manufacturer: syz [ 162.198210][ T11] usb 3-1: SerialNumber: syz [ 162.223226][ T5737] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 162.285019][ T11] usb 3-1: config 0 descriptor?? [ 162.386624][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 162.386662][ T5737] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 162.386679][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.440902][ T5737] usb 5-1: config 0 descriptor?? [ 162.479662][ T6175] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 162.660631][ T6180] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.105'. [ 162.746989][ T5737] usbhid 5-1:0.0: can't add hid device: -71 [ 162.747222][ T5737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.895720][ T5737] usb 5-1: USB disconnect, device number 2 [ 163.459988][ T6162] ------------[ cut here ]------------ [ 163.460000][ T6162] kcov->t != t [ 163.460011][ T6162] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: syz.3.101/6162 [ 163.460059][ T6162] Modules linked in: [ 163.460088][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.460109][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.460122][ T6162] RIP: 0010:kcov_task_exit+0x181/0x240 [ 163.460150][ T6162] Code: 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 ec 7f 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 163.460164][ T6162] RSP: 0018:ffffc90007ae7ae0 EFLAGS: 00010287 [ 163.460177][ T6162] RAX: b03dfe01585e4300 RBX: ffff8880314a1f00 RCX: 0000000000000000 [ 163.460189][ T6162] RDX: 0000000014dee08c RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 163.460201][ T6162] RBP: ffffc90007ae7c30 R08: ffffffff8b43b9a0 R09: 0000000000000000 [ 163.460212][ T6162] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000009 [ 163.460222][ T6162] R13: 0000000000000004 R14: ffff88801ff34c00 R15: ffff88801ff34c08 [ 163.460234][ T6162] FS: 00007f0e078966c0(0000) GS:ffff888125c4c000(0000) knlGS:0000000000000000 [ 163.460247][ T6162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.460258][ T6162] CR2: 00007fe820b53591 CR3: 0000000021f66000 CR4: 00000000003526f0 [ 163.460273][ T6162] Call Trace: [ 163.460279][ T6162] [ 163.460287][ T6162] do_exit+0x159/0x2360 [ 163.460315][ T6162] ? rt_mutex_slowunlock+0x665/0xa20 [ 163.460337][ T6162] ? __pfx_do_exit+0x10/0x10 [ 163.460361][ T6162] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 163.460378][ T6162] ? rt_spin_lock+0x1e0/0x400 [ 163.460401][ T6162] ? rt_spin_unlock+0x157/0x200 [ 163.460421][ T6162] do_group_exit+0x22d/0x2f0 [ 163.460446][ T6162] ? rt_spin_unlock+0x163/0x200 [ 163.460465][ T6162] get_signal+0x121b/0x12c0 [ 163.460501][ T6162] arch_do_signal_or_restart+0xbb/0x860 [ 163.460526][ T6162] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.460572][ T6162] exit_to_user_mode_loop+0x104/0x730 [ 163.460588][ T6162] ? rcu_is_watching+0x15/0xb0 [ 163.460621][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.460638][ T6162] do_syscall_64+0x353/0x580 [ 163.460662][ T6162] ? clear_bhb_loop+0x40/0x90 [ 163.460682][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.460697][ T6162] RIP: 0033:0x7f0e0965d3d0 [ 163.460714][ T6162] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d aa 1d 07 00 e8 65 65 f9 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 163.460765][ T6162] RSP: 002b:00007f0e07895a78 EFLAGS: 00000246 [ 163.460782][ T6162] RAX: 0000000000000000 RBX: 00007f0e098c5fa0 RCX: 00007f0e0963de59 [ 163.460799][ T6162] RDX: 00007f0e07895a80 RSI: 00007f0e07895bb0 RDI: 0000000000000021 [ 163.460810][ T6162] RBP: 00007f0e096d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 163.460819][ T6162] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 163.460828][ T6162] R13: 00007f0e098c6038 R14: 00007f0e098c5fa0 R15: 00007ffc640c88a8 [ 163.460852][ T6162] [ 163.460860][ T6162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 163.460874][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.460891][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.460900][ T6162] Call Trace: [ 163.460906][ T6162] [ 163.460912][ T6162] vpanic+0x56c/0xa60 [ 163.460930][ T6162] ? __pfx__printk+0x10/0x10 [ 163.460949][ T6162] ? __pfx_vpanic+0x10/0x10 [ 163.460962][ T6162] ? is_bpf_text_address+0x292/0x2b0 [ 163.460985][ T6162] ? is_bpf_text_address+0x26/0x2b0 [ 163.461008][ T6162] panic+0xc5/0xd0 [ 163.461022][ T6162] ? __pfx_panic+0x10/0x10 [ 163.461049][ T6162] __warn+0x315/0x4c0 [ 163.461063][ T6162] ? kcov_task_exit+0x181/0x240 [ 163.461089][ T6162] ? kcov_task_exit+0x181/0x240 [ 163.461111][ T6162] __report_bug+0x331/0x530 [ 163.461139][ T6162] ? kcov_task_exit+0x181/0x240 [ 163.461162][ T6162] ? __pfx___report_bug+0x10/0x10 [ 163.461187][ T6162] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 163.461211][ T6162] ? rt_spin_lock+0x1e0/0x400 [ 163.461229][ T6162] ? rt_spin_lock+0x1e0/0x400 [ 163.461247][ T6162] ? kcov_task_exit+0x181/0x240 [ 163.461269][ T6162] report_bug+0x16a/0x220 [ 163.461292][ T6162] ? kcov_task_exit+0x181/0x240 [ 163.461313][ T6162] ? kcov_task_exit+0x183/0x240 [ 163.461335][ T6162] handle_bug+0x9c/0x200 [ 163.461350][ T6162] exc_invalid_op+0x1a/0x50 [ 163.461364][ T6162] asm_exc_invalid_op+0x1a/0x20 [ 163.461398][ T6162] RIP: 0010:kcov_task_exit+0x181/0x240 [ 163.461421][ T6162] Code: 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 ec 7f 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 163.461433][ T6162] RSP: 0018:ffffc90007ae7ae0 EFLAGS: 00010287 [ 163.461446][ T6162] RAX: b03dfe01585e4300 RBX: ffff8880314a1f00 RCX: 0000000000000000 [ 163.461457][ T6162] RDX: 0000000014dee08c RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 163.461468][ T6162] RBP: ffffc90007ae7c30 R08: ffffffff8b43b9a0 R09: 0000000000000000 [ 163.461484][ T6162] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000009 [ 163.461494][ T6162] R13: 0000000000000004 R14: ffff88801ff34c00 R15: ffff88801ff34c08 [ 163.461510][ T6162] ? rt_spin_lock+0x1e0/0x400 [ 163.461534][ T6162] do_exit+0x159/0x2360 [ 163.461561][ T6162] ? rt_mutex_slowunlock+0x665/0xa20 [ 163.461581][ T6162] ? __pfx_do_exit+0x10/0x10 [ 163.461605][ T6162] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 163.461622][ T6162] ? rt_spin_lock+0x1e0/0x400 [ 163.461645][ T6162] ? rt_spin_unlock+0x157/0x200 [ 163.461664][ T6162] do_group_exit+0x22d/0x2f0 [ 163.461689][ T6162] ? rt_spin_unlock+0x163/0x200 [ 163.461709][ T6162] get_signal+0x121b/0x12c0 [ 163.461743][ T6162] arch_do_signal_or_restart+0xbb/0x860 [ 163.461767][ T6162] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.461804][ T6162] exit_to_user_mode_loop+0x104/0x730 [ 163.461819][ T6162] ? rcu_is_watching+0x15/0xb0 [ 163.461839][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.461857][ T6162] do_syscall_64+0x353/0x580 [ 163.461881][ T6162] ? clear_bhb_loop+0x40/0x90 [ 163.461900][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.461916][ T6162] RIP: 0033:0x7f0e0965d3d0 [ 163.461929][ T6162] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d aa 1d 07 00 e8 65 65 f9 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 163.461941][ T6162] RSP: 002b:00007f0e07895a78 EFLAGS: 00000246 [ 163.461954][ T6162] RAX: 0000000000000000 RBX: 00007f0e098c5fa0 RCX: 00007f0e0963de59 [ 163.461964][ T6162] RDX: 00007f0e07895a80 RSI: 00007f0e07895bb0 RDI: 0000000000000021 [ 163.461980][ T6162] RBP: 00007f0e096d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 163.461990][ T6162] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 163.462000][ T6162] R13: 00007f0e098c6038 R14: 00007f0e098c5fa0 R15: 00007ffc640c88a8 [ 163.462024][ T6162] [ 163.462649][ T6162] Kernel Offset: disabled