last executing test programs: 22.768821421s ago: executing program 1 (id=42): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCSLCKTRMIOS(r0, 0x89f0, &(0x7f0000000180)) 21.00264066s ago: executing program 0 (id=43): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004810) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x3, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", "00000005", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x40}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x43, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 19.343177575s ago: executing program 1 (id=46): r0 = socket$inet6(0xa, 0x80802, 0x0) r1 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 18.933383804s ago: executing program 3 (id=47): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="70000000aaaaaaaaaa34aaaaaaaaaabb08004500004e0001e0000001"], 0x60) 17.533368146s ago: executing program 4 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x8, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') poll(&(0x7f0000000180)=[{r4, 0x201}], 0x1, 0x10000) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0xf58) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) 17.523395464s ago: executing program 2 (id=49): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) 17.441979687s ago: executing program 0 (id=50): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = io_uring_setup(0x2cee, &(0x7f0000000100)={0x0, 0x100093b0, 0x3, 0x0, 0xb15}) unshare(0x2c020400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/139) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000001fff0000000000005c000000", @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000001000000000000000000000000000000000000000000000000000000000008000000000020001062c000000480003006465666c61746500"/174], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac14140000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e50800000200"/16, @ANYRESHEX=0x0, @ANYRESOCT=r1], 0x10}}, 0x40408c1) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17.238158603s ago: executing program 2 (id=51): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x10003, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x41}, 0x94) 17.22725406s ago: executing program 1 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010029bd7000fedbdf2500000000", @ANYRES32=r3, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x25}, 0x4c840) 11.959582155s ago: executing program 4 (id=53): openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 11.929507739s ago: executing program 0 (id=54): syz_clone(0x801180, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5d, &(0x7f0000000680)={@link_local, @empty, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@llc={0x4, {@snap={0x0, 0x155, "a7", "b83349", 0x6003, "c0d436e04aea92726de4de47b1a4b0664f290fafdf2664cd9a1f177e655cc6c456d95c9a2cd2ba984b547b855780f0a19e29dab0628b7edb5ac4c5fd69aafea5da4d51"}}}}}, &(0x7f0000000700)={0x1, 0x2, [0xb36, 0x26, 0xfad, 0xd93]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000d03000000000000000000000105000000080000000100000000000007000000000000000000000003000000000100000001000000000000000061"], 0x0, 0x5b}, 0x28) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000600)=""/6, &(0x7f0000000640)=0x6) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff53663e"], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 11.772456326s ago: executing program 4 (id=55): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x10000, r1, r1, 0x7ffffffffffffffb, 0xffffffffffffffff, 0x1}) 10.891613569s ago: executing program 4 (id=56): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCSLCKTRMIOS(r0, 0x89f0, &(0x7f0000000180)) 10.83768943s ago: executing program 2 (id=57): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x7c, 0x67, 0x0, 0x48, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x20, 0xca, 0x0, 0xfff, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x14, 0xf989, "d05766e732402f706496caea8dd3a3eb"}, @generic={0x5, 0xb, "cb34bf6dbac3acd229"}, @timestamp={0x8, 0xa, 0x7, 0x81}, @timestamp={0x8, 0xa, 0xb741, 0x7}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @fastopen={0x22, 0x8, "da0647316a11"}]}}}}}}}, 0x0) 10.690486309s ago: executing program 1 (id=58): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r1, @ANYBLOB="3f00000006020400280012800b000100627269"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c9368c, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x20, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x0, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0xfffffffc, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x3, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 10.582578599s ago: executing program 3 (id=59): timer_create(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing={0x0, 0x0, 0x1}]}}}}}}}, 0x0) 10.575137755s ago: executing program 2 (id=60): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004810) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x3, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", "00000005", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x40}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x43, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 10.39416864s ago: executing program 3 (id=61): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = io_uring_setup(0x2cee, &(0x7f0000000100)={0x0, 0x100093b0, 0x3, 0x0, 0xb15}) unshare(0x2c020400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/139) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000001fff0000000000005c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000001000000000000000000000000000000000000000000000000000000000008000000000020001062c000000480003006465666c61746500000000000000000000000000000000ffffffdf00"/236], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80000, 0x9) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e50800000200"/16, @ANYRESHEX=0x0, @ANYRESOCT=r1], 0x10}}, 0x40408c1) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10.299302989s ago: executing program 1 (id=62): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) 3.484574695s ago: executing program 2 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000783afffe8000000000000000000000000000bbff020000000000000000000011860090780000fbff0000000000000008080aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37a"], 0x0) r2 = dup(r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.436563988s ago: executing program 1 (id=64): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r0, 0x0, 0x35) 2.3491524s ago: executing program 4 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) close(0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(0x0, 0x0) 2.302421789s ago: executing program 3 (id=66): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x10000, r1, r1, 0x7ffffffffffffffb, 0xffffffffffffffff, 0x1}) 2.292655327s ago: executing program 0 (id=67): r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000400)=""/113) 2.057751145s ago: executing program 3 (id=68): socket(0x2b, 0x80000, 0x101) openat$autofs(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000200)) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) 827.234472ms ago: executing program 0 (id=69): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x9}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 435.129864ms ago: executing program 2 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x40004) sendmsg$nl_route(r0, 0x0, 0x0) 296.799668ms ago: executing program 0 (id=71): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r1, r1, 0x1, 0x4d, 0xffff, 0x2, {0x800000, 0x7, 0x2, 0x7fff, 0x7, 0x3, 0xffff, 0x9, 0x8, 0x8, 0x101, 0x9, 0xa97, 0xd70, "008122ac5c4a1eb845aab5316c18c7a6f8fb1d7cbf6da5dc59ccd7b80222f80f"}}) 251.54862ms ago: executing program 4 (id=72): openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="8600"/14, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7b, 0x0, &(0x7f0000000680)="08fc2d37454bce1054875b602a61bb1293a7b9fb7a001d35a690d850b9e025124a49c05e63f6400e50e9a7c540f5eb2fa22427e37a15269b0b899b25aca1245a5b0fe596e988a25afde881680004706637de1f6090ba49aaf3e2a1d612e5f49864753e1dda5ded521ea13c68dc1eb8368edad8d95f708698180a10", &(0x7f0000000ac0), 0x4, 0x0, 0x9305}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "0c51c349"}]}}, 0x0}, 0x0) 0s ago: executing program 3 (id=73): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004810) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x3, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", "00000005", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x40}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x43, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 90.203553][ T5789] cgroup: Unknown subsys name 'net' [ 90.444432][ T5789] cgroup: Unknown subsys name 'cpuset' [ 90.479292][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.127924][ T44] cfg80211: failed to load regulatory.db [ 92.450425][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.590125][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.592200][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.595177][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.595293][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.599602][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.601176][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.602481][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.623582][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.653401][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.654305][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.683139][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.684789][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.685370][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.690398][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.693973][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.694982][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.709614][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.713477][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.715133][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.721253][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.840331][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.848358][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.864103][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.883135][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.884024][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.840807][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 96.929053][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 96.947346][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 96.965707][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 97.147026][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 97.640036][ T5804] Bluetooth: hci0: command tx timeout [ 97.719537][ T5804] Bluetooth: hci2: command tx timeout [ 97.719545][ T5808] Bluetooth: hci1: command tx timeout [ 97.739504][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.739711][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.741663][ T5802] bridge_slave_0: entered allmulticast mode [ 97.743775][ T5802] bridge_slave_0: entered promiscuous mode [ 97.878729][ T5804] Bluetooth: hci3: command tx timeout [ 97.961285][ T5804] Bluetooth: hci4: command tx timeout [ 97.990032][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.990138][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.990522][ T5802] bridge_slave_1: entered allmulticast mode [ 97.992491][ T5802] bridge_slave_1: entered promiscuous mode [ 98.339787][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.339908][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.340050][ T5806] bridge_slave_0: entered allmulticast mode [ 98.341958][ T5806] bridge_slave_0: entered promiscuous mode [ 98.343735][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.343864][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.344042][ T5803] bridge_slave_0: entered allmulticast mode [ 98.346169][ T5803] bridge_slave_0: entered promiscuous mode [ 98.347881][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.348076][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.348255][ T5809] bridge_slave_0: entered allmulticast mode [ 98.352244][ T5809] bridge_slave_0: entered promiscuous mode [ 98.540227][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.540421][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.540618][ T5806] bridge_slave_1: entered allmulticast mode [ 98.542811][ T5806] bridge_slave_1: entered promiscuous mode [ 98.544628][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.544754][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.544898][ T5803] bridge_slave_1: entered allmulticast mode [ 98.546777][ T5803] bridge_slave_1: entered promiscuous mode [ 98.548205][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.548308][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.548447][ T5809] bridge_slave_1: entered allmulticast mode [ 98.554303][ T5809] bridge_slave_1: entered promiscuous mode [ 98.665041][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.901830][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.901967][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.902196][ T5810] bridge_slave_0: entered allmulticast mode [ 98.907750][ T5810] bridge_slave_0: entered promiscuous mode [ 98.927349][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.259771][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.259928][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.260117][ T5810] bridge_slave_1: entered allmulticast mode [ 99.262250][ T5810] bridge_slave_1: entered promiscuous mode [ 99.342791][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.346222][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.352613][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.542664][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.545629][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.548236][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.632577][ T5802] team0: Port device team_slave_0 added [ 99.718969][ T5804] Bluetooth: hci0: command tx timeout [ 99.798790][ T5804] Bluetooth: hci2: command tx timeout [ 99.809099][ T5804] Bluetooth: hci1: command tx timeout [ 99.873003][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.875124][ T5802] team0: Port device team_slave_1 added [ 99.958752][ T5804] Bluetooth: hci3: command tx timeout [ 100.038828][ T5804] Bluetooth: hci4: command tx timeout [ 100.112805][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.362806][ T5806] team0: Port device team_slave_0 added [ 100.365180][ T5803] team0: Port device team_slave_0 added [ 100.368286][ T5809] team0: Port device team_slave_0 added [ 100.521549][ T5806] team0: Port device team_slave_1 added [ 100.523474][ T5803] team0: Port device team_slave_1 added [ 100.525366][ T5809] team0: Port device team_slave_1 added [ 100.620872][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.620886][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.620905][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.851840][ T5810] team0: Port device team_slave_0 added [ 100.852992][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.853008][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.853037][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.071820][ T5810] team0: Port device team_slave_1 added [ 101.085124][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.085141][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.085169][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.086453][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.086468][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.086496][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.087881][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.087894][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.087922][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.173488][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.173509][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.173542][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.175400][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.175417][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.175450][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.177266][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.177280][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.177311][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.390781][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.390800][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.390830][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.475097][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.475111][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.475130][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.570271][ T5802] hsr_slave_0: entered promiscuous mode [ 101.571516][ T5802] hsr_slave_1: entered promiscuous mode [ 101.799528][ T5804] Bluetooth: hci0: command tx timeout [ 101.878890][ T5804] Bluetooth: hci1: command tx timeout [ 101.879006][ T5804] Bluetooth: hci2: command tx timeout [ 101.997392][ T5806] hsr_slave_0: entered promiscuous mode [ 101.998399][ T5806] hsr_slave_1: entered promiscuous mode [ 102.001037][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 102.001186][ T5806] Cannot create hsr debugfs directory [ 102.012465][ T5803] hsr_slave_0: entered promiscuous mode [ 102.014115][ T5803] hsr_slave_1: entered promiscuous mode [ 102.015209][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 102.015238][ T5803] Cannot create hsr debugfs directory [ 102.030833][ T5809] hsr_slave_0: entered promiscuous mode [ 102.032441][ T5809] hsr_slave_1: entered promiscuous mode [ 102.033602][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 102.033630][ T5809] Cannot create hsr debugfs directory [ 102.038954][ T5808] Bluetooth: hci3: command tx timeout [ 102.120430][ T5808] Bluetooth: hci4: command tx timeout [ 102.251841][ T5810] hsr_slave_0: entered promiscuous mode [ 102.253435][ T5810] hsr_slave_1: entered promiscuous mode [ 102.254442][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 102.254466][ T5810] Cannot create hsr debugfs directory [ 103.879866][ T5808] Bluetooth: hci0: command tx timeout [ 103.958668][ T5808] Bluetooth: hci2: command tx timeout [ 103.958702][ T5808] Bluetooth: hci1: command tx timeout [ 104.016204][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.057087][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.094066][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.118769][ T5804] Bluetooth: hci3: command tx timeout [ 104.151341][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.198991][ T5804] Bluetooth: hci4: command tx timeout [ 104.288293][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.325727][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.368834][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.422357][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.589249][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.617531][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.656589][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.695839][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.841258][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.883187][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.917293][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.950494][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.100002][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.146280][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.171460][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.211162][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.247801][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.340672][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.359956][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.396516][ T2190] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.397089][ T2190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.438314][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.443497][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.505005][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.552769][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.552919][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.572764][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.601327][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.601474][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.687975][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.723319][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.740976][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.741146][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.793596][ T2190] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.793756][ T2190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.885441][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.911044][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.938979][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.939127][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.988404][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.994599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.063275][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.130231][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.130438][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.183133][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.183352][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.246478][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.494869][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.560434][ T5802] veth0_vlan: entered promiscuous mode [ 106.627313][ T5802] veth1_vlan: entered promiscuous mode [ 106.736590][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.746945][ T5803] veth0_vlan: entered promiscuous mode [ 106.801241][ T5803] veth1_vlan: entered promiscuous mode [ 106.835869][ T5802] veth0_macvtap: entered promiscuous mode [ 106.877693][ T5802] veth1_macvtap: entered promiscuous mode [ 106.960761][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.975456][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.984300][ T5809] veth0_vlan: entered promiscuous mode [ 107.002703][ T5803] veth0_macvtap: entered promiscuous mode [ 107.005735][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.043099][ T5803] veth1_macvtap: entered promiscuous mode [ 107.060012][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.061124][ T2190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.064959][ T5809] veth1_vlan: entered promiscuous mode [ 107.074069][ T2190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.088872][ T2190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.101504][ T2190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.266480][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.347732][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.429267][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.439815][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.455556][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.522221][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.554926][ T5809] veth0_macvtap: entered promiscuous mode [ 107.569762][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.569792][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.574548][ T5806] veth0_vlan: entered promiscuous mode [ 107.642774][ T5809] veth1_macvtap: entered promiscuous mode [ 107.784429][ T5806] veth1_vlan: entered promiscuous mode [ 107.835840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.835861][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.918489][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.952962][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.952985][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.973776][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.060410][ T1127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.061528][ T5810] veth0_vlan: entered promiscuous mode [ 108.069323][ T1127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.114525][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.130768][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.151003][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.151025][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.225612][ T5810] veth1_vlan: entered promiscuous mode [ 108.241423][ T5806] veth0_macvtap: entered promiscuous mode [ 108.333188][ T5806] veth1_macvtap: entered promiscuous mode [ 108.536963][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.536985][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.617743][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.734314][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.747941][ T5810] veth0_macvtap: entered promiscuous mode [ 108.798352][ T5810] veth1_macvtap: entered promiscuous mode [ 108.820287][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.864420][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.864442][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.883457][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.900923][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.907683][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.957334][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.044978][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.150674][ T5929] 9p: Unknown Cache mode or invalid value f [ 109.171369][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.287705][ T1114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.287894][ T1114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.287934][ T1114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.287971][ T1114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.597574][ T2190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.597602][ T2190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.657136][ T5940] sctp: [Deprecated]: syz.3.11 (pid 5940) Use of int in max_burst socket option. [ 109.657136][ T5940] Use struct sctp_assoc_value instead [ 109.884773][ T5943] syz_tun: entered allmulticast mode [ 109.913758][ T5943] pimreg: entered allmulticast mode [ 109.986590][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.986613][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.103432][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.103455][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.291785][ T5946] syz.2.13 (5946) used greatest stack depth: 18680 bytes left [ 110.338995][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.339018][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.731161][ T5817] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.845099][ T5959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17'. [ 110.921547][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 110.994889][ T5817] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 110.994924][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.994944][ T5817] usb 4-1: Product: syz [ 110.994960][ T5817] usb 4-1: Manufacturer: syz [ 110.994973][ T5817] usb 4-1: SerialNumber: syz [ 111.102963][ T5817] usb 4-1: config 0 descriptor?? [ 111.226647][ T5965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 111.362071][ T5817] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 111.362856][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 112.021203][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.082637][ T5817] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 112.083526][ T5817] usb 4-1: media controller created [ 112.957731][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.280668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.349964][ T5817] usb 4-1: selecting invalid altsetting 7 [ 114.376619][ T5817] cxusb: set interface failed [ 114.376683][ T5817] dvb-usb: bulk message failed: -22 (1/0) [ 114.879715][ T5980] process 'syz.3.24' launched './file0' with NULL argv: empty string added [ 114.934331][ T5817] DVB: Unable to find symbol lgdt330x_attach() [ 114.934363][ T5817] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 115.436378][ T5987] 9pnet_virtio: no channels available for device syz [ 115.472508][ T5987] ======================================================= [ 115.472508][ T5987] WARNING: The mand mount option has been deprecated and [ 115.472508][ T5987] and is ignored by this kernel. Remove the mand [ 115.472508][ T5987] option from the mount to silence this warning. [ 115.472508][ T5987] ======================================================= [ 115.747483][ T5989] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 116.186890][ T5989] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 116.187433][ T5989] overlayfs: failed to look up (tracing) for ino (-66) [ 116.358689][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.548657][ T5817] rc_core: IR keymap rc-dvico-portable not found [ 116.548682][ T5817] Registered IR keymap rc-empty [ 117.445417][ T5817] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 117.465363][ T5817] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 117.508691][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 117.525468][ T5817] dvb-usb: schedule remote query interval to 100 msecs. [ 117.525494][ T5817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 117.564995][ T5817] usb 4-1: USB disconnect, device number 2 [ 117.580488][ T5889] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 117.580520][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.580542][ T5889] usb 3-1: Product: syz [ 117.580557][ T5889] usb 3-1: Manufacturer: syz [ 117.580571][ T5889] usb 3-1: SerialNumber: syz [ 117.662142][ T5889] usb 3-1: config 0 descriptor?? [ 117.818954][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.819060][ T5889] usb 3-1: setting power ON [ 117.819081][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 117.897961][ T5983] cxusb: i2c rd: len=80 is too big! [ 117.897961][ T5983] [ 117.979570][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.980642][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 117.980703][ T5889] usb 3-1: media controller created [ 118.114198][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.175000][ T6004] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 118.326328][ T5817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 118.372530][ T6010] 9pnet_virtio: no channels available for device syz [ 118.968648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.518114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.518152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.118608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.245827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.245863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.819102][ T5889] usb 3-1: selecting invalid altsetting 6 [ 120.819128][ T5889] usb 3-1: digital interface selection failed (-22) [ 120.819144][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 120.839088][ T5889] usb 3-1: setting power OFF [ 120.839379][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 120.839400][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 120.839416][ T5889] (NULL device *): no alternate interface [ 121.032251][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.066294][ T6018] binder: 6016:6018 ioctl c0306201 0 returned -14 [ 121.097338][ T6018] binder: 6016:6018 ioctl c0306201 2000000003c0 returned -14 [ 121.139373][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.198624][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 121.215771][ T9] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 121.215803][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.215823][ T9] usb 2-1: Product: syz [ 121.215836][ T9] usb 2-1: Manufacturer: syz [ 121.215852][ T9] usb 2-1: SerialNumber: syz [ 121.312811][ T9] usb 2-1: config 0 descriptor?? [ 121.364810][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 121.364865][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 121.389263][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.391779][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 121.391851][ T9] usb 2-1: media controller created [ 121.445592][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.465779][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 121.630938][ T9] usb 2-1: selecting invalid altsetting 7 [ 121.630959][ T9] cxusb: set interface failed [ 121.630973][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 121.667295][ T5889] usb 3-1: USB disconnect, device number 2 [ 121.739066][ T6014] dvb-usb: bulk message failed: -22 (80/0) [ 124.329274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.108556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.138543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.358730][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 127.358746][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 127.377118][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 127.546563][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.561226][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.728643][ T9] rc_core: IR keymap rc-dvico-portable not found [ 127.728662][ T9] Registered IR keymap rc-empty [ 127.838187][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.370333][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 129.373788][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 129.457228][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 129.457250][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 129.498865][ T9] usb 2-1: USB disconnect, device number 2 [ 129.864630][ T6080] 9pnet_virtio: no channels available for device syz [ 131.136974][ T6082] netlink: 72 bytes leftover after parsing attributes in process `syz.0.50'. [ 135.156727][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.302526][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 135.342698][ T6003] udevd[6003]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 136.532405][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 136.551341][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.552035][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.205769][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.206556][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.318989][ T2431] cec-vivid-001-vid-cap0: message 55 timed out [ 143.629404][ T6130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.61'. [ 144.824360][ T6140] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 144.824391][ T6140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.838388][ T6140] vhci_hcd vhci_hcd.0: Device attached [ 145.139720][ T5955] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 145.145364][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.321333][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 145.460406][ T9] usb 2-1: config 0 has no interfaces? [ 145.460548][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 145.460626][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.804720][ T6156] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.058086][ T6156] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.371134][ T9] usb 2-1: config 0 descriptor?? [ 146.644744][ T6141] vhci_hcd: connection reset by peer [ 146.654244][ T2190] vhci_hcd: stop threads [ 146.654985][ T2190] vhci_hcd: release socket [ 146.655238][ T2190] vhci_hcd: disconnect device [ 146.681486][ T5889] usb 2-1: USB disconnect, device number 3 [ 147.146487][ T6138] ------------[ cut here ]------------ [ 147.146514][ T6138] WARNING: CPU: 1 PID: 6138 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 147.146567][ T6138] Modules linked in: [ 147.146607][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.146633][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.146652][ T6138] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 147.146682][ T6138] Code: c7 c7 d0 45 c5 8e 48 c7 c6 c3 27 da 8c 48 c7 c2 89 fd d8 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 147.146701][ T6138] RSP: 0018:ffffc9000c61fd00 EFLAGS: 00010287 [ 147.146720][ T6138] RAX: fe7eec20697c9100 RBX: ffff888146394e00 RCX: 0000000000000000 [ 147.146775][ T6138] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 147.146791][ T6138] RBP: ffffc9000c61fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 147.146806][ T6138] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100557110d [ 147.146822][ T6138] R13: 0000000000000000 R14: ffff888146394e08 R15: ffff888026a70000 [ 147.146838][ T6138] FS: 000055558f3e5500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 147.146857][ T6138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.146872][ T6138] CR2: 00007f6a5c94f368 CR3: 000000002c316000 CR4: 00000000003526f0 [ 147.146892][ T6138] Call Trace: [ 147.146905][ T6138] [ 147.146918][ T6138] do_exit+0x105/0x2300 [ 147.146952][ T6138] ? preempt_schedule_thunk+0x16/0x30 [ 147.146988][ T6138] ? rt_mutex_slowunlock+0x668/0x8a0 [ 147.147021][ T6138] ? __pfx_do_exit+0x10/0x10 [ 147.147054][ T6138] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 147.147084][ T6138] ? __rcu_read_unlock+0x84/0xe0 [ 147.147109][ T6138] ? rt_spin_unlock+0x161/0x200 [ 147.147133][ T6138] do_group_exit+0x21c/0x2d0 [ 147.147159][ T6138] __x64_sys_exit_group+0x3f/0x40 [ 147.147179][ T6138] x64_sys_call+0x21f7/0x2200 [ 147.147201][ T6138] do_syscall_64+0xfa/0xfa0 [ 147.147231][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.147261][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.147281][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 147.147306][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.147328][ T6138] RIP: 0033:0x7f849c1cf749 [ 147.147356][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.147372][ T6138] RSP: 002b:00007ffcc2dd09b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 147.147394][ T6138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f849c1cf749 [ 147.147410][ T6138] RDX: 00007f849b439000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.147423][ T6138] RBP: 00007ffcc2dd0a1c R08: 00000000000059f4 R09: 000055558f3f8590 [ 147.147437][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 147.147449][ T6138] R13: 000055558f3f8590 R14: 0000000000022f75 R15: 00007ffcc2dd0a70 [ 147.147482][ T6138] [ 147.147493][ T6138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.147509][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.147534][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.147546][ T6138] Call Trace: [ 147.147554][ T6138] [ 147.147563][ T6138] dump_stack_lvl+0x99/0x250 [ 147.147598][ T6138] ? __asan_memcpy+0x40/0x70 [ 147.147625][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.147659][ T6138] ? __pfx__printk+0x10/0x10 [ 147.147703][ T6138] vpanic+0x237/0x6d0 [ 147.147731][ T6138] ? __pfx_vpanic+0x10/0x10 [ 147.147764][ T6138] panic+0xb9/0xc0 [ 147.147785][ T6138] ? __pfx_panic+0x10/0x10 [ 147.147823][ T6138] __warn+0x31b/0x4b0 [ 147.147843][ T6138] ? kcov_task_exit+0x13c/0x150 [ 147.147875][ T6138] ? kcov_task_exit+0x13c/0x150 [ 147.147901][ T6138] report_bug+0x2be/0x4f0 [ 147.147926][ T6138] ? kcov_task_exit+0x13c/0x150 [ 147.147950][ T6138] ? kcov_task_exit+0x13c/0x150 [ 147.147973][ T6138] ? kcov_task_exit+0x13e/0x150 [ 147.147995][ T6138] handle_bug+0x84/0x160 [ 147.148013][ T6138] exc_invalid_op+0x1a/0x50 [ 147.148031][ T6138] asm_exc_invalid_op+0x1a/0x20 [ 147.148047][ T6138] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 147.148071][ T6138] Code: c7 c7 d0 45 c5 8e 48 c7 c6 c3 27 da 8c 48 c7 c2 89 fd d8 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 147.148085][ T6138] RSP: 0018:ffffc9000c61fd00 EFLAGS: 00010287 [ 147.148100][ T6138] RAX: fe7eec20697c9100 RBX: ffff888146394e00 RCX: 0000000000000000 [ 147.148112][ T6138] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 147.148124][ T6138] RBP: ffffc9000c61fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 147.148136][ T6138] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100557110d [ 147.148149][ T6138] R13: 0000000000000000 R14: ffff888146394e08 R15: ffff888026a70000 [ 147.148166][ T6138] ? rt_spin_lock+0x1c1/0x3e0 [ 147.148195][ T6138] do_exit+0x105/0x2300 [ 147.148220][ T6138] ? preempt_schedule_thunk+0x16/0x30 [ 147.148246][ T6138] ? rt_mutex_slowunlock+0x668/0x8a0 [ 147.148270][ T6138] ? __pfx_do_exit+0x10/0x10 [ 147.148296][ T6138] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 147.148319][ T6138] ? __rcu_read_unlock+0x84/0xe0 [ 147.148343][ T6138] ? rt_spin_unlock+0x161/0x200 [ 147.148366][ T6138] do_group_exit+0x21c/0x2d0 [ 147.148386][ T6138] __x64_sys_exit_group+0x3f/0x40 [ 147.148402][ T6138] x64_sys_call+0x21f7/0x2200 [ 147.148420][ T6138] do_syscall_64+0xfa/0xfa0 [ 147.148445][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.148475][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.148496][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 147.148522][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.148543][ T6138] RIP: 0033:0x7f849c1cf749 [ 147.148557][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.148572][ T6138] RSP: 002b:00007ffcc2dd09b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 147.148590][ T6138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f849c1cf749 [ 147.148603][ T6138] RDX: 00007f849b439000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.148614][ T6138] RBP: 00007ffcc2dd0a1c R08: 00000000000059f4 R09: 000055558f3f8590 [ 147.148626][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 147.148636][ T6138] R13: 000055558f3f8590 R14: 0000000000022f75 R15: 00007ffcc2dd0a70 [ 147.148664][ T6138] [ 147.148960][ T6138] Kernel Offset: disabled