last executing test programs: 8.638126724s ago: executing program 1 (id=2): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000580)="31e328bc6953290c53e1f9bc8241170bb646040afecd776ef1c1d8f6e4b76a86f414d398c2c421e5714b93e9e1416bf3c0bfa727a7c3843b5ffa2cf7a2ccdc41ec2ca365a2f172697c8e1dc1f7bf0bccc75092bd3217f657cfae7dbb32b7118fd67cb7d11dfe5a2ddb4c993c3a78f43a01a22c186f10259e8402e0026c39fa44e345b04a", 0x84, r2) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 7.59987021s ago: executing program 1 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 7.217953839s ago: executing program 2 (id=3): setns(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03471b00003fba10e40007000000300002"], 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 7.118755412s ago: executing program 1 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0xe0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x20000322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10d5, 0x200, 0x0, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20020, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2000, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x658, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 7.084985672s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001080)={0xe0, 0x11, 0x509, 0x0, 0xfffffffd, "", [@generic="f00000000000803c00255bc4015e9b6fbec8af3c225cc4b40c649c0ceaf022c95732f4adf4140b96919b71fe0cc256f26228f9464a652d67efb6297e54709334451de3b1bea7bed647168061e24f6d19d1c4bbb10589a0ae736692eb148288c06ae7505965d7e81645188ea3fd6a8ce34ffc6bb18fcb4d5496bb33dab3d738e88c79a6477cfeabb6f2d8603f07fe1ac3d539806647374206efb255c25f93139bf8938481189439a8f58e69b9b4fc8cca04f5abf1993a1008e3b8f7a1d411e880a38dfef16d3ce80a07c0d4b95c"]}, 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003fc0)=[{&(0x7f00000049c0)="a26776", 0x3}, {0x0}], 0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x1234, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x1, {{'sha1\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) 5.840848664s ago: executing program 0 (id=7): socket$tipc(0x1e, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x44050) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 5.59489277s ago: executing program 3 (id=8): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x1, 0x0, 0xfffffffd, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r5}) 4.654259923s ago: executing program 1 (id=9): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r0) 3.409776015s ago: executing program 3 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 2.998183575s ago: executing program 1 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff0000000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x300, 0x36, 0x0, &(0x7f0000000880)='`\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00', 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) close_range(r0, 0xffffffffffffffff, 0x0) 2.592787785s ago: executing program 0 (id=12): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x1, 0x5453, 0xe, 0xffff, 0x0, 0x3, "e77a52b50e78f1e2cf9c2a2315bef545", 0x1, 0xa, 0x2, 0xb, 0x52, 0x6, 0x6b}) 2.446294419s ago: executing program 0 (id=13): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8905, &(0x7f0000000240)) 2.324444172s ago: executing program 0 (id=14): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5e001, 0x11b) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x8000000000000001) 2.301117752s ago: executing program 2 (id=15): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000580)="31e328bc6953290c53e1f9bc8241170bb646040afecd776ef1c1d8f6e4b76a86f414d398c2c421e5714b93e9e1416bf3c0bfa727a7c3843b5ffa2cf7a2ccdc41ec2ca365a2f172697c8e1dc1f7bf0bccc75092bd3217f657cfae7dbb32b7118fd67cb7d11dfe5a2ddb4c993c3a78f43a01a22c186f10259e8402e0026c39fa44e345b04a4f687ae89601f8941c50aeb472bb85ddc4f3f7abff4dce6329f2214e5ea1865e76d93b85ecce4ce3cf74a7", 0xaf, r2) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 1.59344394s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b25986300b30600fc010000000000000000000000000000ff0200000000000000000000000000016c06040306080000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafc00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="7001feff9078000b220c1fbd64270d790044e1a5fea729d901ee22d318f11fe1521b140606e2d4c3d97bd10000000700000008fe0df989a54928de5e48ca582a020400010411e486d6446b102af749c19dbe3e8aa24321e2bfc3d901010000e565807f183ebdc0c69dd09c7643b937f8000000000000"], 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) read(r0, &(0x7f0000000900), 0x100) 1.171162021s ago: executing program 2 (id=17): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 0s ago: executing program 0 (id=18): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019100)={&(0x7f0000019340)=ANY=[@ANYBLOB="200000001214000427bd7077b3832b6d61d7b31dcb55f15a969378f6332f8d5f0d00030000000803000013000000ffaa4c86bcb35c404198224bb6f983e1b8b6bf7429373cda69f00f3e5761c898fe80ba31c938a455735ab5a2ac6ef1d5"], 0x20}, 0x1, 0x0, 0x0, 0x40095}, 0x60048804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$sw_sync_info(0xffffff9c, 0x0, 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000200)={0x0, 0x0, 0xe, 0x3, 0x1}) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000019300)={&(0x7f00000191c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000192c0)={&(0x7f0000019240)={0x7c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7098}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 74.052569][ T5765] cgroup: Unknown subsys name 'net' [ 74.195813][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.589955][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.853192][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.861676][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.889254][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.899666][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.907480][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.915550][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.923237][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.950421][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.959863][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.969571][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.977403][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.995397][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.003394][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.004297][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.012054][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.030192][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.032830][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.045516][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.048675][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.055438][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.070548][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.079725][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.110855][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.118614][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.511620][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 78.614160][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 78.662608][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 78.673118][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.708090][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.715385][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.723893][ T5783] bridge_slave_0: entered allmulticast mode [ 78.731666][ T5783] bridge_slave_0: entered promiscuous mode [ 78.746633][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.753827][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.761360][ T5783] bridge_slave_1: entered allmulticast mode [ 78.768650][ T5783] bridge_slave_1: entered promiscuous mode [ 78.900244][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.935845][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.943455][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.950796][ T5775] bridge_slave_0: entered allmulticast mode [ 78.957538][ T5775] bridge_slave_0: entered promiscuous mode [ 78.966634][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.984684][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.992270][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.001896][ T5784] bridge_slave_0: entered allmulticast mode [ 79.008967][ T5784] bridge_slave_0: entered promiscuous mode [ 79.016509][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.024306][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.031530][ T5784] bridge_slave_1: entered allmulticast mode [ 79.038228][ T5784] bridge_slave_1: entered promiscuous mode [ 79.072438][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.079811][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.086978][ T5775] bridge_slave_1: entered allmulticast mode [ 79.094749][ T5775] bridge_slave_1: entered promiscuous mode [ 79.121987][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.129249][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.136487][ T5779] bridge_slave_0: entered allmulticast mode [ 79.143990][ T5779] bridge_slave_0: entered promiscuous mode [ 79.152009][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.159233][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.166655][ T5779] bridge_slave_1: entered allmulticast mode [ 79.174200][ T5779] bridge_slave_1: entered promiscuous mode [ 79.182843][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.195873][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.217779][ T5783] team0: Port device team_slave_0 added [ 79.257076][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.269024][ T5783] team0: Port device team_slave_1 added [ 79.294815][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.309426][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.321322][ T5784] team0: Port device team_slave_0 added [ 79.338558][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.358595][ T5784] team0: Port device team_slave_1 added [ 79.365665][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.375399][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.404406][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.461613][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.468894][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.495311][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.517637][ T5775] team0: Port device team_slave_0 added [ 79.527733][ T5779] team0: Port device team_slave_0 added [ 79.537292][ T5779] team0: Port device team_slave_1 added [ 79.553588][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.560826][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.586838][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.604883][ T5775] team0: Port device team_slave_1 added [ 79.629668][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.636659][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.665728][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.705338][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.712479][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.738818][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.770141][ T5783] hsr_slave_0: entered promiscuous mode [ 79.776781][ T5783] hsr_slave_1: entered promiscuous mode [ 79.785231][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.792678][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.818675][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.831639][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.838694][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.864899][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.876818][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.886581][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.913346][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.019930][ T5784] hsr_slave_0: entered promiscuous mode [ 80.027390][ T5784] hsr_slave_1: entered promiscuous mode [ 80.033576][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.041598][ T5784] Cannot create hsr debugfs directory [ 80.071292][ T5779] hsr_slave_0: entered promiscuous mode [ 80.077517][ T5779] hsr_slave_1: entered promiscuous mode [ 80.084007][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.092205][ T5779] Cannot create hsr debugfs directory [ 80.129497][ T51] Bluetooth: hci2: command tx timeout [ 80.138682][ T51] Bluetooth: hci1: command tx timeout [ 80.138997][ T5782] Bluetooth: hci0: command tx timeout [ 80.218888][ T5782] Bluetooth: hci3: command tx timeout [ 80.222953][ T5775] hsr_slave_0: entered promiscuous mode [ 80.233121][ T5775] hsr_slave_1: entered promiscuous mode [ 80.239729][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.247293][ T5775] Cannot create hsr debugfs directory [ 80.496480][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.522722][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.549737][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.561105][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.626040][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.640749][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.651359][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.663730][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.776719][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.809138][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.819158][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.853043][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.903320][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.916974][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.935355][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.947922][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.970046][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.983420][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.017980][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.025557][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.084880][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.092037][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.115998][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.159276][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.197914][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.205122][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.232392][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.239576][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.304824][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.352507][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.373578][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.413132][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.420366][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.446269][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.485561][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.492890][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.524072][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.531268][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.574617][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.581860][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.684350][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.770366][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.925857][ T5783] veth0_vlan: entered promiscuous mode [ 81.956465][ T5783] veth1_vlan: entered promiscuous mode [ 82.043157][ T5783] veth0_macvtap: entered promiscuous mode [ 82.083426][ T5783] veth1_macvtap: entered promiscuous mode [ 82.124002][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.210880][ T5782] Bluetooth: hci0: command tx timeout [ 82.211151][ T51] Bluetooth: hci1: command tx timeout [ 82.216315][ T5786] Bluetooth: hci2: command tx timeout [ 82.270981][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.282552][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.299899][ T51] Bluetooth: hci3: command tx timeout [ 82.342093][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.377018][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.391226][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.400706][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.410071][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.420123][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.505482][ T5779] veth0_vlan: entered promiscuous mode [ 82.602232][ T5784] veth0_vlan: entered promiscuous mode [ 82.613544][ T5779] veth1_vlan: entered promiscuous mode [ 82.660179][ T5775] veth0_vlan: entered promiscuous mode [ 82.673849][ T5784] veth1_vlan: entered promiscuous mode [ 82.742988][ T5775] veth1_vlan: entered promiscuous mode [ 82.757349][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.793948][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.804348][ T5779] veth0_macvtap: entered promiscuous mode [ 82.833808][ T5779] veth1_macvtap: entered promiscuous mode [ 82.884209][ T5784] veth0_macvtap: entered promiscuous mode [ 82.892909][ T5775] veth0_macvtap: entered promiscuous mode [ 82.903303][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.915560][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.927086][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.936800][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.937619][ T5784] veth1_macvtap: entered promiscuous mode [ 82.950949][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.954772][ T5775] veth1_macvtap: entered promiscuous mode [ 82.980691][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.993559][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.005673][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.024854][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.037588][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.048856][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.059637][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.072652][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.084196][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.096150][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.106246][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.115950][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.138997][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.149882][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.160376][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.171133][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.181760][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.193855][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.205450][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.246618][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.261253][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.271693][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.284848][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.296952][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.307624][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.319657][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.331014][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.331534][ T5845] Zero length message leads to an empty skb [ 83.342226][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.357964][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.371062][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.383117][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.397929][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.406996][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.416120][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.428104][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.471360][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.496441][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538565][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.585564][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.655438][ T27] audit: type=1800 audit(1791399335.717:2): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file0" dev="overlay" ino=26 res=0 errno=0 [ 84.294360][ T51] Bluetooth: hci0: command tx timeout [ 84.303676][ T5782] Bluetooth: hci2: command tx timeout [ 84.313087][ T5786] Bluetooth: hci1: command tx timeout [ 84.368841][ T5782] Bluetooth: hci3: command tx timeout [ 84.397191][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.425048][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.479930][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.487776][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.523867][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.541258][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.598062][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.618023][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.627092][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.637528][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.725442][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.740874][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.992712][ T5861] binder: BC_ATTEMPT_ACQUIRE not supported [ 85.067399][ T5861] binder: 5860:5861 ioctl c0306201 200000000000 returned -22 [ 85.359318][ T5861] comedi comedi0: Minor 47 could not be opened [ 86.293280][ T5871] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 86.376081][ T5782] Bluetooth: hci2: command tx timeout [ 86.382148][ T5786] Bluetooth: hci1: command tx timeout [ 86.387739][ T51] Bluetooth: hci0: command tx timeout [ 86.451962][ T51] Bluetooth: hci3: command tx timeout [ 87.360132][ T23] cfg80211: failed to load regulatory.db [ 89.122739][ T5878] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.059806][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.359936][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 91.450901][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 91.539419][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.788224][ T9] usb 3-1: config 0 descriptor?? [ 91.827706][ T9] as10x_usb: device has been detected [ 91.853985][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 92.015364][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.202835][ T5904] block device autoloading is deprecated and will be removed. [ 92.226454][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 92.259597][ T5905] random: crng reseeded on system resumption [ 92.371073][ T5897] ------------[ cut here ]------------ [ 92.376599][ T5897] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 92.467463][ T5897] WARNING: CPU: 0 PID: 5897 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 92.482866][ T5897] Modules linked in: [ 92.486843][ T5897] CPU: 0 PID: 5897 Comm: syz.2.17 Not tainted syzkaller #0 [ 92.494173][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.504490][ T5897] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 92.509904][ T5897] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d d1 33 f1 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b7 ca 8a 48 c7 c6 20 b8 ca 8a e8 d8 eb b5 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 92.530282][ T5897] RSP: 0018:ffffc90004abfac0 EFLAGS: 00010246 [ 92.536518][ T5897] RAX: ee4d151d2ddb5300 RBX: ffff88802725ece0 RCX: 0000000000080000 [ 92.545496][ T5897] RDX: ffffc9000da6d000 RSI: 00000000000072d6 RDI: 00000000000072d7 [ 92.553808][ T5897] RBP: ffffc90004abfc20 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 92.562052][ T5897] R10: dffffc0000000000 R11: ffffed10171c518b R12: 1ffff92000957f68 [ 92.570101][ T5897] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 92.578180][ T5897] FS: 00007f0ce7e206c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.587197][ T5897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.593835][ T5897] CR2: 00007f0bac4676a8 CR3: 000000001db31000 CR4: 00000000003506f0 [ 92.601883][ T5897] Call Trace: [ 92.605195][ T5897] [ 92.608138][ T5897] ? __mutex_lock+0x321/0xc80 [ 92.613098][ T5897] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 92.619080][ T5897] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 92.624743][ T5897] ? mutex_lock_nested+0x20/0x20 [ 92.629737][ T5897] ? preempt_schedule+0xc0/0xd0 [ 92.634637][ T5897] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 92.641476][ T5897] ? mutex_unlock+0x10/0x10 [ 92.646198][ T5897] ? mutex_lock_nested+0x20/0x20 [ 92.651307][ T5897] ? preempt_schedule_thunk+0x1a/0x30 [ 92.656715][ T5897] as102_dvb_dmx_start_feed+0x70/0x280 [ 92.662228][ T5897] dmx_ts_feed_start_filtering+0x120/0x220 [ 92.668080][ T5897] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 92.674039][ T5897] dvb_dmxdev_filter_start+0x422/0x10a0 [ 92.679646][ T5897] dvb_demux_do_ioctl+0x482/0x530 [ 92.684731][ T5897] dvb_usercopy+0x195/0x2b0 [ 92.690584][ T5897] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 92.696169][ T5897] ? dvb_generic_ioctl+0xb0/0xb0 [ 92.701173][ T5897] ? dvb_demux_poll+0x210/0x210 [ 92.706054][ T5897] dvb_demux_ioctl+0x29/0x30 [ 92.710797][ T5897] __se_sys_ioctl+0xfd/0x170 [ 92.715441][ T5897] do_syscall_64+0x55/0xb0 [ 92.719922][ T5897] ? clear_bhb_loop+0x40/0x90 [ 92.724626][ T5897] ? clear_bhb_loop+0x40/0x90 [ 92.729356][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.735303][ T5897] RIP: 0033:0x7f0ce6f9e199 [ 92.739802][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.760661][ T5897] RSP: 002b:00007f0ce7e20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.769248][ T5897] RAX: ffffffffffffffda RBX: 00007f0ce7225fa0 RCX: 00007f0ce6f9e199 [ 92.777253][ T5897] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 92.785302][ T5897] RBP: 00007f0ce70358e0 R08: 0000000000000000 R09: 0000000000000000 [ 92.793322][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.801353][ T5897] R13: 00007f0ce7226038 R14: 00007f0ce7225fa0 R15: 00007ffc09d24198 [ 92.809394][ T5897] [ 92.812443][ T5897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.819751][ T5897] CPU: 0 PID: 5897 Comm: syz.2.17 Not tainted syzkaller #0 [ 92.826960][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.837034][ T5897] Call Trace: [ 92.840331][ T5897] [ 92.843284][ T5897] dump_stack_lvl+0x18c/0x250 [ 92.848005][ T5897] ? show_regs_print_info+0x20/0x20 [ 92.853233][ T5897] ? load_image+0x420/0x420 [ 92.857779][ T5897] panic+0x2ca/0x720 [ 92.861702][ T5897] ? bpf_jit_dump+0xd0/0xd0 [ 92.866253][ T5897] __warn+0x2e0/0x470 [ 92.870353][ T5897] ? __mutex_lock+0xb48/0xc80 [ 92.875055][ T5897] ? __mutex_lock+0xb48/0xc80 [ 92.879750][ T5897] report_bug+0x2be/0x4f0 [ 92.884093][ T5897] ? __mutex_lock+0xb48/0xc80 [ 92.888872][ T5897] ? __mutex_lock+0xb48/0xc80 [ 92.893563][ T5897] ? __mutex_lock+0xb4a/0xc80 [ 92.898260][ T5897] handle_bug+0xcf/0x120 [ 92.902524][ T5897] exc_invalid_op+0x1a/0x50 [ 92.907049][ T5897] asm_exc_invalid_op+0x1a/0x20 [ 92.911934][ T5897] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 92.917240][ T5897] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d d1 33 f1 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b7 ca 8a 48 c7 c6 20 b8 ca 8a e8 d8 eb b5 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 92.936867][ T5897] RSP: 0018:ffffc90004abfac0 EFLAGS: 00010246 [ 92.942977][ T5897] RAX: ee4d151d2ddb5300 RBX: ffff88802725ece0 RCX: 0000000000080000 [ 92.951064][ T5897] RDX: ffffc9000da6d000 RSI: 00000000000072d6 RDI: 00000000000072d7 [ 92.959098][ T5897] RBP: ffffc90004abfc20 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 92.967121][ T5897] R10: dffffc0000000000 R11: ffffed10171c518b R12: 1ffff92000957f68 [ 92.976164][ T5897] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 92.984205][ T5897] ? __mutex_lock+0x321/0xc80 [ 92.988923][ T5897] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 92.995047][ T5897] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 93.001067][ T5897] ? mutex_lock_nested+0x20/0x20 [ 93.006210][ T5897] ? preempt_schedule+0xc0/0xd0 [ 93.011086][ T5897] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 93.017083][ T5897] ? mutex_unlock+0x10/0x10 [ 93.021606][ T5897] ? mutex_lock_nested+0x20/0x20 [ 93.026652][ T5897] ? preempt_schedule_thunk+0x1a/0x30 [ 93.032052][ T5897] as102_dvb_dmx_start_feed+0x70/0x280 [ 93.037632][ T5897] dmx_ts_feed_start_filtering+0x120/0x220 [ 93.043477][ T5897] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 93.049737][ T5897] dvb_dmxdev_filter_start+0x422/0x10a0 [ 93.055522][ T5897] dvb_demux_do_ioctl+0x482/0x530 [ 93.060960][ T5897] dvb_usercopy+0x195/0x2b0 [ 93.065534][ T5897] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 93.071134][ T5897] ? dvb_generic_ioctl+0xb0/0xb0 [ 93.076149][ T5897] ? dvb_demux_poll+0x210/0x210 [ 93.081054][ T5897] dvb_demux_ioctl+0x29/0x30 [ 93.085672][ T5897] __se_sys_ioctl+0xfd/0x170 [ 93.090620][ T5897] do_syscall_64+0x55/0xb0 [ 93.095076][ T5897] ? clear_bhb_loop+0x40/0x90 [ 93.099790][ T5897] ? clear_bhb_loop+0x40/0x90 [ 93.104489][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.110504][ T5897] RIP: 0033:0x7f0ce6f9e199 [ 93.114936][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.134564][ T5897] RSP: 002b:00007f0ce7e20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.142996][ T5897] RAX: ffffffffffffffda RBX: 00007f0ce7225fa0 RCX: 00007f0ce6f9e199 [ 93.150988][ T5897] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 93.158988][ T5897] RBP: 00007f0ce70358e0 R08: 0000000000000000 R09: 0000000000000000 [ 93.167599][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.175602][ T5897] R13: 00007f0ce7226038 R14: 00007f0ce7225fa0 R15: 00007ffc09d24198 [ 93.183598][ T5897] [ 93.186835][ T5897] Kernel Offset: disabled [ 93.191358][ T5897] Rebooting in 86400 seconds..