last executing test programs: 11.828875821s ago: executing program 4 (id=310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x48850) 11.650857771s ago: executing program 2 (id=312): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0)) 11.431169973s ago: executing program 2 (id=314): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x19, 0x4}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 8.404257747s ago: executing program 2 (id=326): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000000008, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb21) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xfffffe3e) 8.215504834s ago: executing program 4 (id=327): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0xfffffffffffffffb, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x4, 0x1, 0xcc}, {0x20f6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}}, 0xf0}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) 8.002098321s ago: executing program 4 (id=331): r0 = socket$kcm(0xa, 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000001c00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/115, 0x73}, {0x0}, {&(0x7f00000007c0)=""/175, 0xaf}], 0x6}, 0x10000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/226, 0xe2}, 0xb6}], 0x2, 0x42, &(0x7f0000001c40)={r5, r6+10000000}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 7.827833422s ago: executing program 3 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x80000000000000a, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x2020) 7.600310024s ago: executing program 0 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000f500000000000005000000ff000000"], 0x78) 7.24855411s ago: executing program 2 (id=336): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffee6, 0x0) close(0x3) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c0004800800010000000001140000001100010003000000000000000000000a"], 0x88}}, 0x0) 7.075938418s ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x2000001, 0x1, 0xb000000}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$dsp(r5, 0x0, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000b0100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)={0x40, 0x5, 0x3, "e71796"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f00000002c0)={0x7, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) 6.052677084s ago: executing program 4 (id=338): recvmmsg(0xffffffffffffffff, &(0x7f0000002a40), 0x0, 0x102, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x81) syz_usb_connect(0x5, 0x30e, &(0x7f0000003300)={{0x12, 0x1, 0x110, 0xa3, 0x9c, 0x6c, 0x40, 0x1266, 0x1009, 0x2408, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2fc, 0x3, 0x0, 0x80, 0x0, 0x2, "", [{{0x9, 0x4, 0xc0, 0xf0, 0x9, 0xff, 0x33, 0x3c, 0x0, [], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0x8, 0x84}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6f, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xc7}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x4b, 0x1, 0x8, [@generic={0x3, 0x10, 'x'}, @generic={0x53, 0xd, "89d6a6beac0c24b98dcef3453ab44eb2838f91b81290243fafd59502a813ad3ed1e429cb480683320f6747e1f6493e3aeb198694a4651e9666165fbb5f6743a0fa23e2912111ff24ae5c9067e0ed2028e2"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x5, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x8, 0x6, 0x6, [@generic={0x102, 0x23, "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"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3d7, 0x81, 0xe, 0x4}}, {{0x9, 0x5, 0xe, 0x2, 0x18, 0xa7, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x51, 0x9}]}}]}}, {{0x9, 0x4, 0xb0, 0x3, 0xf, 0xde, 0x73, 0x90, 0x6, [], [{{0x9, 0x5, 0x0, 0x1, 0x200, 0x1, 0x7, 0xfd, [@generic={0x5d, 0x22, "0b9a97e71bd550c99ef062d0ae4113dbdaf3f83d6453a1aa17041a7e0c95d95b20e59c8d50875db2cce3aee60b0e26b1d153b0364983a47601952dd7de98e3863858f8feae0f348fe59635da7326e128d947a0baed6c23010af7f0"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xf9, 0x8, 0x7}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x9, 0x4, 0x8}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x7, 0x15, 0x2}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x52, 0x6, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x5}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x2, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0xd1, 0x2, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x4, 0x1, 0xd}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x5, 0xf7, 0x7}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x52, 0x6, 0xe6}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x3, 0x6, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x6cd9f5d79678934f, 0xc, 0x400, 0x8, 0x10, 0x4}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x9, 0x4, [@generic={0x24, 0x2, "41f341f42376efe311b1567fd9f30056962e4a82553238f0b8a9df2a30f850335c2f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x5a, 0x4, 0x7, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0xd3, 0x42, 0x0, 0xed, 0xc3, 0xb5, 0xff}}]}}]}}, &(0x7f0000004180)={0xa, &(0x7f00000040c0)={0xa, 0x6, 0x110, 0x3, 0x1, 0x4, 0x8, 0x94}, 0xf, &(0x7f0000004100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x5, 0xfffa}]}, 0x1, [{0x27, &(0x7f0000004140)=@string={0x27, 0x3, "a4478be1c8ab204e312152455f57ad4ddf8c5e0c64e78da564164b0074fca89aa0e6dd3938"}}]}) 5.101562603s ago: executing program 2 (id=341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000200)=ANY=[], 0x0, 0xfffffdfe, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000002200)=@ethtool_cmd={0x9, 0x1, 0x2, 0xff, 0xa, 0x4, 0x1, 0x10, 0xfb, 0x8, 0x10001, 0x7, 0x1, 0xfc, 0x8, 0x4, [0x9, 0x3]}}) fchdir(r2) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) 4.665740516s ago: executing program 0 (id=342): fgetxattr(0xffffffffffffffff, &(0x7f0000001400)=@random={'user.', '\'#)-$^-!^\x00'}, 0x0, 0x0) 4.40185735s ago: executing program 0 (id=343): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') close(r0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x35c, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x2, 0x4, 0x200) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000140)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x241, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r4}, 0xc) write(r2, &(0x7f0000000700)='p:myevent ./file0:0', 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000001d0e000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000090000bfa200000000000007020000f8fffffdb703000008000000b18ccfad0e00000085000000030000009500000000000000f626943d6cbe18983971846bcf3e7fcb2ad81700ce29adbb0700349200"/100], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.400411679s ago: executing program 2 (id=344): syz_usb_connect$uac1(0x2, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x0, 0xf0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x3, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x4, 0x4, 0xa5, 0x20, 0x4}, 0x0, 0x0, 0x2, [{0x8a, &(0x7f0000000340)=@string={0x8a, 0x3, "bb3c5129a7d6aaeea801f4a889e5d2d2dc5563dabbb27fe8bf2597a6d13a01b120f7675d67e5a7824b8e228bb746a800000000000000007c0ca9f85a8c4595f3b25cc4f03f3f0e530b90cd6dfb6ce3124b244c31add573bc804670196d6558299378fdca4ac7d6c27d328113dd60c43fd621c25bc221631f1d7a4d27bd715ff0d61882395ae4c852"}}, {0x6e, 0x0}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x100004, 0x81) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000fc0)=0xfffffff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r10, &(0x7f0000000080)='4', 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x154, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xc4, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.222486542s ago: executing program 4 (id=345): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0xfffffffffffffffb, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x4, 0x1, 0xcc}, {0x20f6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}}, 0xf0}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) 4.042148716s ago: executing program 4 (id=346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x48850) 3.951811604s ago: executing program 3 (id=347): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373", 0x0, 0xc}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xdb, @empty, 0xb}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x7, 0xdb}, 0x9c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.919995296s ago: executing program 0 (id=348): r0 = socket$kcm(0xa, 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000001c00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/115, 0x73}, {0x0}, {&(0x7f00000007c0)=""/175, 0xaf}], 0x6}, 0x10000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/226, 0xe2}, 0xb6}], 0x2, 0x42, &(0x7f0000001c40)={r5, r6+10000000}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.352639318s ago: executing program 3 (id=349): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 3.157739976s ago: executing program 1 (id=351): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='!:kprobes/', 0xa) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0xc) connect$unix(r2, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) r3 = syz_open_dev$sg(0x0, 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) 2.877523174s ago: executing program 0 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x2000001, 0x1, 0xb000000}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$dsp(r5, 0x0, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000b0100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)={0x40, 0x5, 0x3, "e71796"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f00000002c0)={0x7, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) 2.847613961s ago: executing program 1 (id=353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fgetxattr(r0, 0x0, 0x0, 0x0) 2.622213857s ago: executing program 1 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) fcntl$dupfd(r0, 0x406, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 2.311714461s ago: executing program 1 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0xfffffdfe, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000002200)=@ethtool_cmd={0x9, 0x1, 0x2, 0xff, 0xa, 0x4, 0x1, 0x10, 0xfb, 0x8, 0x10001, 0x7, 0x1, 0xfc, 0x8, 0x4, [0x9, 0x3]}}) fchdir(r2) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) 2.222130232s ago: executing program 3 (id=356): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0xfffffffffffffffb, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x4, 0x1, 0xcc}, {0x20f6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}}, 0xf0}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) 1.828825119s ago: executing program 3 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x80000000000000a, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) 1.268985078s ago: executing program 1 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6], 0x44}}, 0x0) 259.863058ms ago: executing program 3 (id=359): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec4333", 0xf1}, {&(0x7f0000000cc0)="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", 0x118}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=360): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 85.719612][ T5588] cgroup: Unknown subsys name 'net' [ 85.982314][ T5588] cgroup: Unknown subsys name 'cpuset' [ 86.025433][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.056824][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.673059][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.711564][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.716589][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.719605][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.724631][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.736234][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.760061][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.761700][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.763543][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.764337][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.876885][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.902139][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.903165][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.921846][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.948800][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.952376][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.953312][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.967076][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.992094][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.993392][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.994356][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.020024][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.021395][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.022661][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.049466][ T4917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.958563][ T821] cfg80211: failed to load regulatory.db [ 92.856087][ T5617] Bluetooth: hci0: command tx timeout [ 92.856095][ T5607] Bluetooth: hci1: command tx timeout [ 93.094883][ T5607] Bluetooth: hci2: command tx timeout [ 93.179528][ T5607] Bluetooth: hci3: command tx timeout [ 93.179549][ T5617] Bluetooth: hci4: command tx timeout [ 93.617516][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.618292][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.618967][ T5601] bridge_slave_0: entered allmulticast mode [ 93.621450][ T5601] bridge_slave_0: entered promiscuous mode [ 93.676185][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.676290][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.676423][ T5613] bridge_slave_0: entered allmulticast mode [ 93.678246][ T5613] bridge_slave_0: entered promiscuous mode [ 93.718777][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.718849][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.719141][ T5601] bridge_slave_1: entered allmulticast mode [ 93.720765][ T5601] bridge_slave_1: entered promiscuous mode [ 93.721985][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.722089][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.722217][ T5611] bridge_slave_0: entered allmulticast mode [ 93.724190][ T5611] bridge_slave_0: entered promiscuous mode [ 93.794168][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.794282][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.794455][ T5613] bridge_slave_1: entered allmulticast mode [ 93.804189][ T5613] bridge_slave_1: entered promiscuous mode [ 93.846885][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.846976][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.847077][ T5611] bridge_slave_1: entered allmulticast mode [ 93.848607][ T5611] bridge_slave_1: entered promiscuous mode [ 93.849975][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.850088][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.850199][ T5602] bridge_slave_0: entered allmulticast mode [ 93.852067][ T5602] bridge_slave_0: entered promiscuous mode [ 93.910092][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.910205][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.910312][ T5610] bridge_slave_0: entered allmulticast mode [ 93.912195][ T5610] bridge_slave_0: entered promiscuous mode [ 93.962280][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.962452][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.962562][ T5602] bridge_slave_1: entered allmulticast mode [ 93.964217][ T5602] bridge_slave_1: entered promiscuous mode [ 94.007912][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.008016][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.008155][ T5610] bridge_slave_1: entered allmulticast mode [ 94.010026][ T5610] bridge_slave_1: entered promiscuous mode [ 94.021523][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.074006][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.098408][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.101333][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.132850][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.170351][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.173497][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.208336][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.247863][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.270345][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.272482][ T5601] team0: Port device team_slave_0 added [ 94.316102][ T5613] team0: Port device team_slave_0 added [ 94.337907][ T5601] team0: Port device team_slave_1 added [ 94.339897][ T5611] team0: Port device team_slave_0 added [ 94.365945][ T5613] team0: Port device team_slave_1 added [ 94.399340][ T5611] team0: Port device team_slave_1 added [ 94.401290][ T5602] team0: Port device team_slave_0 added [ 94.425856][ T5610] team0: Port device team_slave_0 added [ 94.461210][ T5602] team0: Port device team_slave_1 added [ 94.490935][ T5610] team0: Port device team_slave_1 added [ 94.492157][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.492168][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.492188][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.572350][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.572363][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.572382][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.622214][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.622227][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.622248][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.623339][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.623350][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.623370][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.687513][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.687585][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.687665][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.771368][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.771385][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.771416][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.773093][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.773104][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.773124][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.827882][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.827909][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.827976][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.887244][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.887290][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.887353][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.903308][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.903351][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.903425][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.935022][ T5607] Bluetooth: hci1: command tx timeout [ 94.935103][ T5607] Bluetooth: hci0: command tx timeout [ 95.175015][ T5617] Bluetooth: hci2: command tx timeout [ 95.254917][ T5617] Bluetooth: hci3: command tx timeout [ 95.254950][ T5617] Bluetooth: hci4: command tx timeout [ 95.549302][ T5601] hsr_slave_0: entered promiscuous mode [ 95.551427][ T5601] hsr_slave_1: entered promiscuous mode [ 95.580419][ T5613] hsr_slave_0: entered promiscuous mode [ 95.581366][ T5613] hsr_slave_1: entered promiscuous mode [ 95.582123][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 95.582217][ T5613] Cannot create hsr debugfs directory [ 95.643357][ T5611] hsr_slave_0: entered promiscuous mode [ 95.644267][ T5611] hsr_slave_1: entered promiscuous mode [ 95.650855][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 95.650935][ T5611] Cannot create hsr debugfs directory [ 95.703340][ T5602] hsr_slave_0: entered promiscuous mode [ 95.704236][ T5602] hsr_slave_1: entered promiscuous mode [ 95.706992][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 95.707051][ T5602] Cannot create hsr debugfs directory [ 95.729990][ T5610] hsr_slave_0: entered promiscuous mode [ 95.731029][ T5610] hsr_slave_1: entered promiscuous mode [ 95.731708][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 95.731724][ T5610] Cannot create hsr debugfs directory [ 96.659638][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.712047][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.721734][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.769929][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.782848][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.809530][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.839878][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.881978][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.006455][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.015155][ T5607] Bluetooth: hci0: command tx timeout [ 97.015185][ T5607] Bluetooth: hci1: command tx timeout [ 97.049771][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.065387][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.088799][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.092844][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.139232][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.163044][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.189782][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.265091][ T5617] Bluetooth: hci2: command tx timeout [ 97.310794][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.334958][ T5607] Bluetooth: hci3: command tx timeout [ 97.335053][ T5617] Bluetooth: hci4: command tx timeout [ 97.359179][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.372529][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.397707][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.400678][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.453385][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.479654][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.519912][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.673941][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.719805][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.738846][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.769853][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.782685][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.819953][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.852319][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.878957][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.939376][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.021227][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.050259][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.071491][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.108403][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.130006][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.158040][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.161359][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.189071][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.202481][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.275038][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.277114][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.343334][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.361678][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.361781][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.483800][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.532398][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.532489][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.559771][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.599598][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.599940][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.698052][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.742948][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.764487][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.764699][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.838723][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.838888][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.956409][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.002012][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.012464][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.012596][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.094988][ T5607] Bluetooth: hci0: command tx timeout [ 99.095040][ T5617] Bluetooth: hci1: command tx timeout [ 99.100059][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.100291][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.216553][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.264044][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.274317][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.334962][ T5617] Bluetooth: hci2: command tx timeout [ 99.341225][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.341432][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.417672][ T5617] Bluetooth: hci4: command tx timeout [ 99.417706][ T5617] Bluetooth: hci3: command tx timeout [ 99.866348][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.291417][ T5601] veth0_vlan: entered promiscuous mode [ 100.356888][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.411568][ T5601] veth1_vlan: entered promiscuous mode [ 100.696764][ T5601] veth0_macvtap: entered promiscuous mode [ 100.718618][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.751232][ T5601] veth1_macvtap: entered promiscuous mode [ 100.781825][ T5611] veth0_vlan: entered promiscuous mode [ 100.905309][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.911217][ T5611] veth1_vlan: entered promiscuous mode [ 100.935963][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.974088][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.994297][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.190106][ T5602] veth0_vlan: entered promiscuous mode [ 101.336215][ T5611] veth0_macvtap: entered promiscuous mode [ 101.383938][ T5602] veth1_vlan: entered promiscuous mode [ 101.515446][ T5611] veth1_macvtap: entered promiscuous mode [ 101.584304][ T5610] veth0_vlan: entered promiscuous mode [ 101.627032][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.627058][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.662002][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.693584][ T5610] veth1_vlan: entered promiscuous mode [ 101.733639][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.777195][ T5602] veth0_macvtap: entered promiscuous mode [ 101.815734][ T5613] veth0_vlan: entered promiscuous mode [ 101.818351][ T5602] veth1_macvtap: entered promiscuous mode [ 101.822019][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.822037][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.966787][ T5613] veth1_vlan: entered promiscuous mode [ 102.134569][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.150960][ T5610] veth0_macvtap: entered promiscuous mode [ 102.235746][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.255225][ T5610] veth1_macvtap: entered promiscuous mode [ 102.343381][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.343403][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.458606][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.494626][ T5613] veth0_macvtap: entered promiscuous mode [ 102.735722][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.774744][ T5613] veth1_macvtap: entered promiscuous mode [ 103.621792][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.621814][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.700038][ T5798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.067589][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.199476][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.977251][ T5810] NILFS (nullb0): couldn't find nilfs on the device [ 106.521046][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.521067][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.747999][ T5812] syz.0.9 (5812) used greatest stack depth: 18408 bytes left [ 106.948217][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.948241][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.195453][ T1425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.195474][ T1425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.265448][ T5785] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.622748][ T5822] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.673374][ T5785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.673405][ T5785] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.682908][ T5785] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 107.682988][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.683031][ T5785] usb 3-1: Product: syz [ 107.683063][ T5785] usb 3-1: Manufacturer: syz [ 107.683101][ T5785] usb 3-1: SerialNumber: syz [ 107.797096][ T3407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.797117][ T3407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.088860][ T3281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.088881][ T3281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.218657][ T1425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.235963][ T1425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.267541][ T1425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.748385][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.749867][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.137670][ T5785] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 109.157246][ T3281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.157267][ T3281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.185633][ T1425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185680][ T1425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185719][ T1425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185758][ T1425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185799][ T1425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185845][ T1425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185885][ T1425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185923][ T1425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185963][ T1425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186002][ T1425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186041][ T1425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186080][ T1425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186119][ T1425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186158][ T1425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186196][ T1425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.861272][ T5785] usb 3-1: USB disconnect, device number 2 [ 110.342605][ T5785] usblp0: removed [ 111.787193][ T5872] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.765293][ T5334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.593440][ T5334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.622195][ T5334] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 117.622224][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.622243][ T5334] usb 2-1: Product: syz [ 117.622256][ T5334] usb 2-1: Manufacturer: syz [ 117.622271][ T5334] usb 2-1: SerialNumber: syz [ 117.896069][ T5334] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 117.914966][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 119.151161][ T5334] gspca_mr97310a: reg write [19] error -110 [ 119.317586][ T5334] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 120.094792][ T5734] usb 2-1: USB disconnect, device number 2 [ 121.565917][ T5970] [U]  [ 121.620681][ T5972] binder: BINDER_SET_CONTEXT_MGR already set [ 121.620694][ T5972] binder: 5971:5972 ioctl 4018620d 200000004a80 returned -16 [ 124.813923][ T6016] binder: BINDER_SET_CONTEXT_MGR already set [ 124.813938][ T6016] binder: 6015:6016 ioctl 4018620d 200000004a80 returned -16 [ 125.993624][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 130.364383][ T6072] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.656624][ T6076] [U]  [ 130.891748][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 132.858492][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858560][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.359216][ T6125] [U]  [ 133.628736][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 133.646944][ T6119] pim6reg: entered allmulticast mode [ 135.058166][ T6161] binder: BINDER_SET_CONTEXT_MGR already set [ 135.058182][ T6161] binder: 6159:6161 ioctl 4018620d 200000004a80 returned -16 [ 136.091208][ T6149] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 136.444886][ T6176] [U]  [ 137.642953][ T6213] [U]  [ 137.717448][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.724663][ T6215] device-mapper: ioctl: name not supplied when creating device [ 137.867572][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.874285][ T5878] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 137.874315][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.874335][ T5878] usb 4-1: Product: syz [ 137.874350][ T5878] usb 4-1: Manufacturer: syz [ 137.874365][ T5878] usb 4-1: SerialNumber: syz [ 137.988209][ T5878] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 139.192899][ T6243] [U]  [ 139.205508][ T5878] gspca_mr97310a: reg write [21] error -71 [ 139.205614][ T5878] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 139.409991][ T5878] usb 4-1: USB disconnect, device number 2 [ 139.637680][ T6247] device-mapper: ioctl: name not supplied when creating device [ 140.611082][ T6252] nvme nvme0: rdma connection establishment failed (-104) [ 142.739692][ T6287] device-mapper: ioctl: name not supplied when creating device [ 142.904794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.974804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.044798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.377088][ T6323] device-mapper: ioctl: name not supplied when creating device [ 147.005341][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 147.006047][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 147.870574][ T6352] device-mapper: ioctl: name not supplied when creating device [ 154.916950][ T6420] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.454739][ T6455] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.059604][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 160.523257][ T6486] Zero length message leads to an empty skb [ 160.590245][ T6488] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 162.494975][ T6518] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 162.704940][ T5334] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.862214][ T5334] usb 3-1: config 0 has an invalid interface number: 192 but max is 1 [ 162.862247][ T5334] usb 3-1: config 0 has an invalid interface number: 176 but max is 1 [ 162.862260][ T5334] usb 3-1: config 0 has no interface number 0 [ 162.862270][ T5334] usb 3-1: config 0 has no interface number 1 [ 162.862305][ T5334] usb 3-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 162.862319][ T5334] usb 3-1: config 0 interface 192 altsetting 240 endpoint 0x3 has an invalid bInterval 75, changing to 10 [ 162.862336][ T5334] usb 3-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 162.862349][ T5334] usb 3-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 162.862363][ T5334] usb 3-1: config 0 interface 192 altsetting 240 endpoint 0x1 has invalid maxpacket 983, setting to 64 [ 162.862380][ T5334] usb 3-1: config 0 interface 192 altsetting 240 bulk endpoint 0xE has invalid maxpacket 24 [ 162.862403][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 162.862417][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 162.862433][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 162.862449][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 162.862462][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 162.862476][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 162.862490][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 162.862504][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 162.862518][ T5334] usb 3-1: config 0 interface 176 altsetting 3 has an endpoint descriptor with address 0x4F, changing to 0xF [ 162.862534][ T5334] usb 3-1: config 0 interface 176 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 162.862552][ T5334] usb 3-1: config 0 interface 192 has no altsetting 0 [ 162.862564][ T5334] usb 3-1: config 0 interface 176 has no altsetting 0 [ 162.947166][ T5334] usb 3-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=24.08 [ 162.947256][ T5334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.947304][ T5334] usb 3-1: Product: syz [ 162.947342][ T5334] usb 3-1: Manufacturer: syz [ 162.947390][ T5334] usb 3-1: SerialNumber: syz [ 163.242539][ T5334] usb 3-1: config 0 descriptor?? [ 163.305500][ T6516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.421047][ T6531] syz.4.240 uses obsolete (PF_INET,SOCK_PACKET) [ 163.577895][ T5334] option 3-1:0.192: GSM modem (1-port) converter detected [ 164.267554][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 164.343325][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 164.482705][ T5334] usb 3-1: USB disconnect, device number 3 [ 164.768733][ T5334] option 3-1:0.192: device disconnected [ 166.964912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.086462][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.237014][ T9] usb 2-1: config 0 has an invalid interface number: 192 but max is 1 [ 167.237042][ T9] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 167.237064][ T9] usb 2-1: config 0 has no interface number 0 [ 167.237080][ T9] usb 2-1: config 0 has no interface number 1 [ 167.237153][ T9] usb 2-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 167.237176][ T9] usb 2-1: config 0 interface 192 altsetting 240 endpoint 0x3 has an invalid bInterval 75, changing to 10 [ 167.237203][ T9] usb 2-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 167.237225][ T9] usb 2-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 167.237249][ T9] usb 2-1: config 0 interface 192 altsetting 240 endpoint 0x1 has invalid maxpacket 983, setting to 64 [ 167.237276][ T9] usb 2-1: config 0 interface 192 altsetting 240 bulk endpoint 0xE has invalid maxpacket 24 [ 167.237313][ T9] usb 2-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 167.237333][ T9] usb 2-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 167.237359][ T9] usb 2-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 167.237385][ T9] usb 2-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 167.237407][ T9] usb 2-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 167.237428][ T9] usb 2-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 167.237450][ T9] usb 2-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 167.237473][ T9] usb 2-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 167.237495][ T9] usb 2-1: config 0 interface 176 altsetting 3 has an endpoint descriptor with address 0x4F, changing to 0xF [ 167.237521][ T9] usb 2-1: config 0 interface 176 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 167.237549][ T9] usb 2-1: config 0 interface 192 has no altsetting 0 [ 167.237567][ T9] usb 2-1: config 0 interface 176 has no altsetting 0 [ 167.244472][ T9] usb 2-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=24.08 [ 167.244502][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.244537][ T9] usb 2-1: Product: syz [ 167.244552][ T9] usb 2-1: Manufacturer: syz [ 167.244567][ T9] usb 2-1: SerialNumber: syz [ 167.542187][ T9] usb 2-1: config 0 descriptor?? [ 167.545212][ T6561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.178494][ T9] option 2-1:0.192: GSM modem (1-port) converter detected [ 170.504446][ T9] usb 2-1: USB disconnect, device number 3 [ 170.617465][ T9] option 2-1:0.192: device disconnected [ 173.336054][ T5334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 173.499801][ T5334] usb 1-1: config 0 has an invalid interface number: 192 but max is 1 [ 173.499826][ T5334] usb 1-1: config 0 has an invalid interface number: 176 but max is 1 [ 173.499843][ T5334] usb 1-1: config 0 has no interface number 0 [ 173.499855][ T5334] usb 1-1: config 0 has no interface number 1 [ 173.499906][ T5334] usb 1-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 173.499925][ T5334] usb 1-1: config 0 interface 192 altsetting 240 endpoint 0x3 has an invalid bInterval 75, changing to 10 [ 173.499971][ T5334] usb 1-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 173.499991][ T5334] usb 1-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 173.500013][ T5334] usb 1-1: config 0 interface 192 altsetting 240 endpoint 0x1 has invalid maxpacket 983, setting to 64 [ 173.500038][ T5334] usb 1-1: config 0 interface 192 altsetting 240 bulk endpoint 0xE has invalid maxpacket 24 [ 173.500073][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 173.500092][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 173.500117][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 173.500141][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 173.500162][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 173.500181][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 173.500201][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 173.500222][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 173.500243][ T5334] usb 1-1: config 0 interface 176 altsetting 3 has an endpoint descriptor with address 0x4F, changing to 0xF [ 173.500265][ T5334] usb 1-1: config 0 interface 176 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 173.500291][ T5334] usb 1-1: config 0 interface 192 has no altsetting 0 [ 173.500309][ T5334] usb 1-1: config 0 interface 176 has no altsetting 0 [ 173.725869][ T5334] usb 1-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=24.08 [ 173.725901][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.725923][ T5334] usb 1-1: Product: syz [ 173.725939][ T5334] usb 1-1: Manufacturer: syz [ 173.725955][ T5334] usb 1-1: SerialNumber: syz [ 173.804866][ T5334] usb 1-1: config 0 descriptor?? [ 173.812453][ T6633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.161550][ T5334] option 1-1:0.192: GSM modem (1-port) converter detected [ 174.472057][ T5334] usb 1-1: USB disconnect, device number 2 [ 174.721670][ T5334] option 1-1:0.192: device disconnected [ 175.646734][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 175.683560][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 176.127906][ T6667] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 177.594809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 183.914790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.255082][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 184.255804][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 186.108703][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'. [ 187.194581][ T6818] netlink: 14 bytes leftover after parsing attributes in process `syz.4.331'. [ 187.545016][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.837369][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.864906][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 187.888436][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.888495][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.888527][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 187.888555][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.888580][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.888625][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.888652][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.066990][ T31] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.067021][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.100884][ T31] usb 1-1: config 0 descriptor?? [ 188.118625][ T31] cp210x 1-1:0.0: cp210x converter detected [ 188.359156][ T9] usb 3-1: config 0 descriptor?? [ 188.674969][ T9] rc_core: IR keymap rc-hauppauge not found [ 188.674991][ T9] Registered IR keymap rc-empty [ 188.675616][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.705884][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.749395][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 188.754339][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 188.780865][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 188.941284][ T10] usb 5-1: config 0 has an invalid interface number: 192 but max is 2 [ 188.941317][ T10] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 188.941339][ T10] usb 5-1: config 0 has an invalid interface number: 211 but max is 2 [ 188.941362][ T10] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 188.941384][ T10] usb 5-1: config 0 has no interface number 0 [ 188.941401][ T10] usb 5-1: config 0 has no interface number 1 [ 188.941456][ T10] usb 5-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 188.941488][ T10] usb 5-1: config 0 interface 192 altsetting 240 endpoint 0x3 has an invalid bInterval 75, changing to 10 [ 188.941518][ T10] usb 5-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 188.941541][ T10] usb 5-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 188.941566][ T10] usb 5-1: config 0 interface 192 altsetting 240 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 188.941597][ T10] usb 5-1: config 0 interface 192 has no altsetting 0 [ 188.941626][ T10] usb 5-1: config 0 interface 211 has no altsetting 0 [ 189.074990][ T10] usb 5-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=24.08 [ 189.075020][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.075041][ T10] usb 5-1: Product: syz [ 189.075056][ T10] usb 5-1: Manufacturer: syz [ 189.075069][ T10] usb 5-1: SerialNumber: syz [ 189.250308][ T31] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 189.250338][ T31] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 189.276625][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.279951][ T10] usb 5-1: config 0 descriptor?? [ 189.297910][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.314970][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.334902][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.354923][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.376178][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.394914][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.414915][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.434932][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.466614][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.546841][ T10] option 5-1:0.192: GSM modem (1-port) converter detected [ 189.606741][ T10] usb 5-1: USB disconnect, device number 2 [ 189.629438][ T10] option 5-1:0.192: device disconnected [ 189.729003][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 189.729026][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 189.775929][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.923134][ T31] usb 1-1: cp210x converter now attached to ttyUSB0 [ 189.986617][ T5902] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 189.986649][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.986668][ T5902] usb 2-1: Product: syz [ 189.986682][ T5902] usb 2-1: Manufacturer: syz [ 189.986696][ T5902] usb 2-1: SerialNumber: syz [ 190.035289][ T9] usb 3-1: USB disconnect, device number 4 [ 190.058028][ T31] usb 1-1: USB disconnect, device number 3 [ 190.087346][ T5902] usb 2-1: config 0 descriptor?? [ 190.184519][ T5902] go7007 2-1:0.0: Sensoray 2250 found [ 190.184718][ T5902] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 190.581760][ T5902] usb 2-1: USB disconnect, device number 4 [ 190.594492][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.677603][ T31] cp210x 1-1:0.0: device disconnected [ 190.989709][ T6874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.348'. [ 191.285160][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 191.388282][ T6886] capability: warning: `syz.1.351' uses 32-bit capabilities (legacy support in use) [ 191.436969][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 191.461232][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 191.461265][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.461287][ T9] usb 3-1: Product: syz [ 191.461311][ T9] usb 3-1: SerialNumber: syz [ 191.549881][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 192.014954][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.181836][ T5902] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.181869][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.219647][ T5902] usb 1-1: config 0 descriptor?? [ 192.251300][ T5902] cp210x 1-1:0.0: cp210x converter detected [ 194.310565][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 194.338376][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338456][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.406820][ T5902] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 194.406848][ T5902] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 194.528387][ T5902] usb 1-1: cp210x converter now attached to ttyUSB0 [ 194.637404][ T5902] usb 1-1: USB disconnect, device number 4 [ 194.665246][ T6914] CIFS: Attempting to mount //127.0.0.1/share [ 194.696700][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.739295][ T5902] cp210x 1-1:0.0: device disconnected [ 194.781767][ T6914] CIFS: VFS: Error connecti[ 194.781767][ T6914] CIFS: VFS: Error connecting to socket. Aborting operation. [ 194.782041][ T6914] CIFS: VFS: cifs_mount failed w/return code = -111 [ 194.783902][ T6914] ------------[ cut here ]------------ [ 194.783913][ T6914] kcov->t != t [ 194.783932][ T6914] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: syz.1.360/6914 [ 194.783990][ T6914] Modules linked in: [ 194.784030][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.784058][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.784074][ T6914] RIP: 0010:kcov_task_exit+0x181/0x240 [ 194.784107][ T6914] Code: 90 00 00 00 e8 90 d3 57 00 4c 89 f7 5b 41 5e 41 5f e9 73 93 5d 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 194.784125][ T6914] RSP: 0018:ffffc9000f09fae0 EFLAGS: 00010206 [ 194.784143][ T6914] RAX: 12f38e430576fc00 RBX: ffff888026521f00 RCX: 0000000000000000 [ 194.784158][ T6914] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 194.784173][ T6914] RBP: ffffc9000f09fc30 R08: ffffffff8b465b20 R09: 0000000000000000 [ 194.784188][ T6914] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 194.784201][ T6914] R13: 0000000000000004 R14: ffff88801c2ceb00 R15: ffff88801c2ceb08 [ 194.784215][ T6914] FS: 00007fa51e1966c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 194.784232][ T6914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.784246][ T6914] CR2: 00007fd7449317e0 CR3: 000000003f682000 CR4: 00000000003526f0 [ 194.784276][ T6914] Call Trace: [ 194.784284][ T6914] [ 194.784295][ T6914] do_exit+0x159/0x2360 [ 194.784315][ T6914] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.784345][ T6914] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 194.784374][ T6914] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 194.784408][ T6914] ? __pfx_do_exit+0x10/0x10 [ 194.784440][ T6914] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 194.784461][ T6914] ? rt_spin_lock+0x1e0/0x400 [ 194.784490][ T6914] ? rt_spin_unlock+0x157/0x200 [ 194.784517][ T6914] do_group_exit+0x22d/0x2f0 [ 194.784536][ T6914] ? rt_spin_unlock+0x163/0x200 [ 194.784561][ T6914] get_signal+0x121b/0x12c0 [ 194.784606][ T6914] arch_do_signal_or_restart+0xbb/0x860 [ 194.784640][ T6914] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.784690][ T6914] exit_to_user_mode_loop+0x104/0x730 [ 194.784711][ T6914] ? rcu_is_watching+0x15/0xb0 [ 194.784786][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.784809][ T6914] do_syscall_64+0x353/0x580 [ 194.784838][ T6914] ? trace_irq_disable+0x3b/0x140 [ 194.784859][ T6914] ? clear_bhb_loop+0x40/0x90 [ 194.784884][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.784905][ T6914] RIP: 0033:0x7fa51ff3e0d9 [ 194.784929][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.784999][ T6914] RSP: 002b:00007fa51e1960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 194.785031][ T6914] RAX: fffffffffffffe00 RBX: 00007fa5201c5fa8 RCX: 00007fa51ff3e0d9 [ 194.785047][ T6914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa5201c5fa8 [ 194.785073][ T6914] RBP: 00007fa5201c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 194.785124][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.785164][ T6914] R13: 00007fa5201c6038 R14: 00007ffd9ca77200 R15: 00007ffd9ca772e8 [ 194.785223][ T6914] [ 194.785258][ T6914] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.785301][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.785334][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.785346][ T6914] Call Trace: [ 194.785354][ T6914] [ 194.785362][ T6914] vpanic+0x56c/0xa60 [ 194.785416][ T6914] ? __pfx__printk+0x10/0x10 [ 194.785482][ T6914] ? __pfx_vpanic+0x10/0x10 [ 194.785500][ T6914] ? is_bpf_text_address+0x292/0x2b0 [ 194.785526][ T6914] ? is_bpf_text_address+0x26/0x2b0 [ 194.785604][ T6914] panic+0xc5/0xd0 [ 194.785646][ T6914] ? __pfx_panic+0x10/0x10 [ 194.785683][ T6914] __warn+0x315/0x4c0 [ 194.785726][ T6914] ? kcov_task_exit+0x181/0x240 [ 194.785804][ T6914] ? kcov_task_exit+0x181/0x240 [ 194.785835][ T6914] __report_bug+0x276/0x570 [ 194.785893][ T6914] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 194.785959][ T6914] ? kcov_task_exit+0x181/0x240 [ 194.785994][ T6914] ? __pfx___report_bug+0x10/0x10 [ 194.786037][ T6914] ? try_to_take_rt_mutex+0x842/0xb00 [ 194.786108][ T6914] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 194.786142][ T6914] ? rt_spin_lock+0x1e0/0x400 [ 194.786165][ T6914] ? rt_spin_lock+0x1e0/0x400 [ 194.786229][ T6914] ? kcov_task_exit+0x181/0x240 [ 194.786287][ T6914] report_bug+0x16a/0x220 [ 194.786317][ T6914] ? kcov_task_exit+0x181/0x240 [ 194.786380][ T6914] ? kcov_task_exit+0x183/0x240 [ 194.786452][ T6914] handle_bug+0x9c/0x200 [ 194.786491][ T6914] exc_invalid_op+0x1a/0x50 [ 194.786575][ T6914] asm_exc_invalid_op+0x1a/0x20 [ 194.786606][ T6914] RIP: 0010:kcov_task_exit+0x181/0x240 [ 194.786638][ T6914] Code: 90 00 00 00 e8 90 d3 57 00 4c 89 f7 5b 41 5e 41 5f e9 73 93 5d 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 194.786683][ T6914] RSP: 0018:ffffc9000f09fae0 EFLAGS: 00010206 [ 194.786706][ T6914] RAX: 12f38e430576fc00 RBX: ffff888026521f00 RCX: 0000000000000000 [ 194.786720][ T6914] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 194.786753][ T6914] RBP: ffffc9000f09fc30 R08: ffffffff8b465b20 R09: 0000000000000000 [ 194.786767][ T6914] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 194.786780][ T6914] R13: 0000000000000004 R14: ffff88801c2ceb00 R15: ffff88801c2ceb08 [ 194.786808][ T6914] ? rt_spin_lock+0x1e0/0x400 [ 194.786888][ T6914] do_exit+0x159/0x2360 [ 194.786913][ T6914] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.786942][ T6914] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 194.787007][ T6914] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 194.787064][ T6914] ? __pfx_do_exit+0x10/0x10 [ 194.787097][ T6914] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 194.787124][ T6914] ? rt_spin_lock+0x1e0/0x400 [ 194.787197][ T6914] ? rt_spin_unlock+0x157/0x200 [ 194.787233][ T6914] do_group_exit+0x22d/0x2f0 [ 194.787253][ T6914] ? rt_spin_unlock+0x163/0x200 [ 194.787304][ T6914] get_signal+0x121b/0x12c0 [ 194.787393][ T6914] arch_do_signal_or_restart+0xbb/0x860 [ 194.787445][ T6914] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.787550][ T6914] exit_to_user_mode_loop+0x104/0x730 [ 194.787572][ T6914] ? rcu_is_watching+0x15/0xb0 [ 194.787622][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.787663][ T6914] do_syscall_64+0x353/0x580 [ 194.787713][ T6914] ? trace_irq_disable+0x3b/0x140 [ 194.787735][ T6914] ? clear_bhb_loop+0x40/0x90 [ 194.787777][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.787854][ T6914] RIP: 0033:0x7fa51ff3e0d9 [ 194.787878][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.787895][ T6914] RSP: 002b:00007fa51e1960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 194.787915][ T6914] RAX: fffffffffffffe00 RBX: 00007fa5201c5fa8 RCX: 00007fa51ff3e0d9 [ 194.787958][ T6914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa5201c5fa8 [ 194.787993][ T6914] RBP: 00007fa5201c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 194.788022][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.788035][ T6914] R13: 00007fa5201c6038 R14: 00007ffd9ca77200 R15: 00007ffd9ca772e8 [ 194.788067][ T6914] [ 194.788682][ T6914] Kernel Offset: disabled