last executing test programs: 10.521211865s ago: executing program 1 (id=5): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10.187526251s ago: executing program 1 (id=6): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) fsync(0xffffffffffffffff) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 9.376747382s ago: executing program 0 (id=1): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x2f) ptrace$setsig(0x4203, r0, 0x8, &(0x7f0000000340)={0x11, 0x7, 0x7ff}) 9.329565224s ago: executing program 1 (id=7): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x8, 0x0, {}, {0x0, 0xe, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 8.993466201s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 7.271605407s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r2, 0x10, 0x2, 0x7fff) 4.868780217s ago: executing program 0 (id=10): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) 4.779961331s ago: executing program 1 (id=12): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 3.898164215s ago: executing program 2 (id=14): socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r4, &(0x7f00000008c0)="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", 0xc7b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x88, 0x2a9, &(0x7f0000000c00)="$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") 3.353745023s ago: executing program 3 (id=15): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_U32_POLICE={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 3.126841184s ago: executing program 3 (id=16): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.921019514s ago: executing program 3 (id=17): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2e, 0x0, 0x6}, 0x28) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x804010, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.378294041s ago: executing program 2 (id=18): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.860246497s ago: executing program 3 (id=19): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.513629585s ago: executing program 32 (id=18): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.503707525s ago: executing program 0 (id=21): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 1.495876835s ago: executing program 1 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0xa) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x0) 1.495191155s ago: executing program 3 (id=23): r0 = syz_open_dev$hidraw(0x0, 0x1, 0x200) listen(0xffffffffffffffff, 0x39b3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) syz_clone(0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 338.346253ms ago: executing program 1 (id=24): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) fsync(0xffffffffffffffff) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 0s ago: executing program 3 (id=25): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a", 0x5c}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667", 0xa8}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 82.466106][ T5757] cgroup: Unknown subsys name 'net' [ 82.607668][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.314135][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.998139][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.998376][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.019586][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.027370][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.027650][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.042551][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.045112][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.061071][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.069162][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.071571][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.083661][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.084187][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.127582][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.136286][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.146806][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.167551][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.175839][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.176288][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.190568][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.198244][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.205740][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.216442][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.230242][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.238094][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.645941][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.707229][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.824371][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.914998][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.923275][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.930905][ T5769] bridge_slave_0: entered allmulticast mode [ 86.938223][ T5769] bridge_slave_0: entered promiscuous mode [ 86.955189][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.962634][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.972300][ T5768] bridge_slave_0: entered allmulticast mode [ 86.979612][ T5768] bridge_slave_0: entered promiscuous mode [ 87.000320][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.007535][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.014855][ T5769] bridge_slave_1: entered allmulticast mode [ 87.022501][ T5769] bridge_slave_1: entered promiscuous mode [ 87.056408][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.063719][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.071119][ T5768] bridge_slave_1: entered allmulticast mode [ 87.078160][ T5768] bridge_slave_1: entered promiscuous mode [ 87.132254][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.162461][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.239735][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.265149][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.301606][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.308986][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.316218][ T5776] bridge_slave_0: entered allmulticast mode [ 87.323795][ T5776] bridge_slave_0: entered promiscuous mode [ 87.367254][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.383831][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.391346][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.398587][ T5776] bridge_slave_1: entered allmulticast mode [ 87.406233][ T5776] bridge_slave_1: entered promiscuous mode [ 87.453768][ T5769] team0: Port device team_slave_0 added [ 87.484709][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.496672][ T5769] team0: Port device team_slave_1 added [ 87.536051][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.575102][ T5768] team0: Port device team_slave_0 added [ 87.721005][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.728032][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.760399][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.786715][ T5768] team0: Port device team_slave_1 added [ 87.829338][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.836416][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.862708][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.876585][ T5776] team0: Port device team_slave_0 added [ 87.894994][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.903141][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.910947][ T5778] bridge_slave_0: entered allmulticast mode [ 87.918185][ T5778] bridge_slave_0: entered promiscuous mode [ 87.948825][ T5776] team0: Port device team_slave_1 added [ 87.958299][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.965350][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.992315][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.004120][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.011711][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.019421][ T5778] bridge_slave_1: entered allmulticast mode [ 88.026567][ T5778] bridge_slave_1: entered promiscuous mode [ 88.065361][ T5769] hsr_slave_0: entered promiscuous mode [ 88.072398][ T5769] hsr_slave_1: entered promiscuous mode [ 88.081285][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.088373][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.114771][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.140020][ T5083] Bluetooth: hci1: command tx timeout [ 88.145812][ T5083] Bluetooth: hci0: command tx timeout [ 88.180144][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.192629][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.213905][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.223454][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.250107][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.289107][ T5083] Bluetooth: hci3: command tx timeout [ 88.289223][ T5778] team0: Port device team_slave_0 added [ 88.294946][ T5083] Bluetooth: hci2: command tx timeout [ 88.316459][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.323977][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.350678][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.376251][ T5778] team0: Port device team_slave_1 added [ 88.477959][ T5768] hsr_slave_0: entered promiscuous mode [ 88.484997][ T5768] hsr_slave_1: entered promiscuous mode [ 88.491653][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.499617][ T5768] Cannot create hsr debugfs directory [ 88.507312][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.514650][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.540645][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.553667][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.561026][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.587119][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.617158][ T5776] hsr_slave_0: entered promiscuous mode [ 88.623809][ T5776] hsr_slave_1: entered promiscuous mode [ 88.630763][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.639138][ T5776] Cannot create hsr debugfs directory [ 88.751437][ T5778] hsr_slave_0: entered promiscuous mode [ 88.758619][ T5778] hsr_slave_1: entered promiscuous mode [ 88.765479][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.773615][ T5778] Cannot create hsr debugfs directory [ 89.167039][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.186280][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.198303][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.208833][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.277249][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.288565][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.300019][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.318538][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.443050][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.454584][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.465262][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.483806][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.588847][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.617795][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.656079][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.665075][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.681949][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.691342][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.704979][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.743382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.750941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.794155][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.801453][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.817587][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.868530][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.875954][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.930238][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.937428][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.997579][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.018047][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.081973][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.124584][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.136337][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.143583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.180876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.188088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.204880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.212122][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.222319][ T5083] Bluetooth: hci0: command tx timeout [ 90.223430][ T52] Bluetooth: hci1: command tx timeout [ 90.250774][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.258038][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.369260][ T52] Bluetooth: hci2: command tx timeout [ 90.370510][ T5083] Bluetooth: hci3: command tx timeout [ 90.537509][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.652759][ T5769] veth0_vlan: entered promiscuous mode [ 90.702575][ T5769] veth1_vlan: entered promiscuous mode [ 90.766831][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.830647][ T5769] veth0_macvtap: entered promiscuous mode [ 90.842287][ T5769] veth1_macvtap: entered promiscuous mode [ 90.913179][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.977279][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.007728][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.018730][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.028177][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037850][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.053118][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.086367][ T5776] veth0_vlan: entered promiscuous mode [ 91.135695][ T5776] veth1_vlan: entered promiscuous mode [ 91.152556][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.291239][ T5768] veth0_vlan: entered promiscuous mode [ 91.297522][ T5778] veth0_vlan: entered promiscuous mode [ 91.314193][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.340384][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.355512][ T5768] veth1_vlan: entered promiscuous mode [ 91.375504][ T5778] veth1_vlan: entered promiscuous mode [ 91.418115][ T5776] veth0_macvtap: entered promiscuous mode [ 91.432797][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.442727][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.455715][ T5776] veth1_macvtap: entered promiscuous mode [ 91.481312][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.493356][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.505666][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.522376][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.537504][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.556268][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.588373][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600156][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.614281][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.623612][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.711022][ T5768] veth0_macvtap: entered promiscuous mode [ 91.748240][ T5768] veth1_macvtap: entered promiscuous mode [ 91.771240][ T5778] veth0_macvtap: entered promiscuous mode [ 91.817297][ T5778] veth1_macvtap: entered promiscuous mode [ 91.831937][ T5835] syz.1.2[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.861109][ T5835] process 'syz.1.2' launched '/dev/fd/3' with NULL argv: empty string added [ 91.898091][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.924153][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.935553][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.949930][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.966877][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.001323][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.041299][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.082825][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.101654][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.133350][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.144451][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.159251][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.174229][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.186554][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.201336][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.214109][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.228038][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.230121][ T968] cfg80211: failed to load regulatory.db [ 92.238766][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.256265][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.272579][ T5838] netlink: 'syz.1.5': attribute type 1 has an invalid length. [ 92.289527][ T5083] Bluetooth: hci0: command tx timeout [ 92.291141][ T52] Bluetooth: hci1: command tx timeout [ 92.327291][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.336191][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.347161][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.355293][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.367991][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.389037][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.409224][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.425956][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.442871][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.450593][ T52] Bluetooth: hci2: command tx timeout [ 92.452267][ T5083] Bluetooth: hci3: command tx timeout [ 92.480065][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490515][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.505509][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.516257][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535762][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.545726][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.557527][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.566856][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.220987][ T5842] overlayfs: missing 'lowerdir' [ 93.427187][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.437978][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.561403][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.620066][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.660781][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.668653][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.118475][ T5083] Bluetooth: hci1: command tx timeout [ 95.124093][ T5083] Bluetooth: hci0: command tx timeout [ 95.129270][ T52] Bluetooth: hci3: command tx timeout [ 95.132098][ T5083] Bluetooth: hci2: command tx timeout [ 95.271099][ T5850] vivid-001: disconnect [ 95.278821][ T5849] vivid-001: reconnect [ 95.284198][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.308086][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.098928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.435999][ T5857] loop2: detected capacity change from 0 to 2048 [ 97.471805][ T5857] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.478410][ T5857] EXT4-fs: Ignoring removed i_version option [ 97.567195][ T5857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.727228][ T27] audit: type=1800 audit(1774503973.255:2): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 97.747377][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.891592][ T5868] loop2: detected capacity change from 2048 to 0 [ 97.917782][ T5857] syz.2.3: attempt to access beyond end of device [ 97.917782][ T5857] loop2: rw=34817, sector=472, nr_sectors = 8 limit=0 [ 97.938359][ T27] audit: type=1800 audit(1774503973.465:3): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 97.984611][ T5857] syz.2.3: attempt to access beyond end of device [ 97.984611][ T5857] loop2: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 98.008668][ T5857] EXT4-fs error (device loop2): ext4_wait_block_bitmap:576: comm syz.2.3: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 98.032572][ T5871] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 98.034894][ T5857] syz.2.3: attempt to access beyond end of device [ 98.034894][ T5857] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 98.061105][ T5857] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 98.074861][ T5857] EXT4-fs (loop2): I/O error while writing superblock [ 98.085107][ T5857] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz.2.3: Error while async write back metadata [ 98.104020][ T5857] syz.2.3: attempt to access beyond end of device [ 98.104020][ T5857] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 98.125544][ T5857] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 98.138372][ T5857] EXT4-fs (loop2): I/O error while writing superblock [ 98.153975][ T5857] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz.2.3: Error while async write back metadata [ 98.168524][ T5857] syz.2.3: attempt to access beyond end of device [ 98.168524][ T5857] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 98.187731][ T5857] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 98.215255][ T5857] EXT4-fs (loop2): I/O error while writing superblock [ 98.235645][ T5857] syz.2.3: attempt to access beyond end of device [ 98.235645][ T5857] loop2: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 98.279136][ T5857] EXT4-fs error (device loop2): ext4_wait_block_bitmap:576: comm syz.2.3: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 98.319131][ T5857] syz.2.3: attempt to access beyond end of device [ 98.319131][ T5857] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 98.364181][ T5857] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 98.377988][ T5857] EXT4-fs (loop2): I/O error while writing superblock [ 98.384995][ T5857] EXT4-fs error (device loop2): ext4_discard_preallocations:5640: comm syz.2.3: Error -5 reading block bitmap for 0 [ 98.402551][ T5857] syz.2.3: attempt to access beyond end of device [ 98.402551][ T5857] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 98.416641][ T5857] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 98.436327][ T5857] EXT4-fs (loop2): I/O error while writing superblock [ 98.680255][ T5778] syz-executor: attempt to access beyond end of device [ 98.680255][ T5778] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 98.796099][ T5778] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 99.066869][ T5778] syz-executor: attempt to access beyond end of device [ 99.066869][ T5778] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 99.111972][ T5778] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 99.133528][ T5778] EXT4-fs (loop2): I/O error while writing superblock [ 99.157894][ T5873] overlayfs: missing 'lowerdir' [ 99.240842][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.288159][ T5778] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 99.329543][ T5778] EXT4-fs (loop2): I/O error while writing superblock [ 99.337505][ T5865] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 100.708233][ T2931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.876646][ T2931] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.020080][ T2931] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.096329][ T2931] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.194196][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.459560][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.709664][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 101.847028][ T8] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 102.099077][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.272864][ T8] usb 1-1: config 0 descriptor?? [ 102.396988][ T8] as10x_usb: device has been detected [ 102.427301][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 102.495469][ T5908] overlayfs: missing 'lowerdir' [ 102.521093][ T8] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 102.560639][ T5891] ------------[ cut here ]------------ [ 102.566169][ T5891] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 102.566273][ T5891] WARNING: CPU: 0 PID: 5891 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 102.581839][ T5891] Modules linked in: [ 102.585887][ T5891] CPU: 0 PID: 5891 Comm: syz.0.21 Not tainted syzkaller #0 [ 102.593382][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.603537][ T5891] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 102.609289][ T5891] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 102.629391][ T5891] RSP: 0018:ffffc90004acfaa0 EFLAGS: 00010246 [ 102.635609][ T5891] RAX: e729170335e67f00 RBX: ffff8880792eece0 RCX: 0000000000080000 [ 102.643684][ T5891] RDX: ffffc9000d259000 RSI: 0000000000005ec3 RDI: 0000000000005ec4 [ 102.651773][ T5891] RBP: ffffc90004acfbf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 102.660928][ T5891] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 102.669143][ T5891] R13: 1ffff92000959f64 R14: dffffc0000000000 R15: 0000000000000000 [ 102.677260][ T5891] FS: 00007fc769e376c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 102.686412][ T5891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.693096][ T5891] CR2: 0000001b2d61fff8 CR3: 000000002d94f000 CR4: 00000000003526f0 [ 102.701161][ T5891] Call Trace: [ 102.704668][ T5891] [ 102.707646][ T5891] ? trace_contention_end+0x39/0xe0 [ 102.712927][ T5891] ? __mutex_lock+0x315/0xcc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.717663][ T5891] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 102.723415][ T5891] ? mutex_lock_nested+0x20/0x20 [ 102.728400][ T5891] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 102.734158][ T5891] ? dmx_section_feed_start_filtering+0x55/0x690 [ 102.740615][ T5891] ? mutex_lock_nested+0x20/0x20 [ 102.745606][ T5891] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 102.751686][ T5891] ? lock_chain_count+0x20/0x20 [ 102.757671][ T5891] ? _raw_spin_lock_irq+0xbb/0xf0 [ 102.762972][ T5891] as102_dvb_dmx_start_feed+0x70/0x280 [ 102.768594][ T5891] dmx_section_feed_start_filtering+0x4f5/0x690 [ 102.775537][ T5891] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 102.781328][ T5891] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 102.786848][ T5891] dvb_demux_do_ioctl+0x467/0x530 [ 102.791994][ T5891] dvb_usercopy+0x195/0x2b0 [ 102.796543][ T5891] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 102.802203][ T5891] ? dvb_generic_ioctl+0xb0/0xb0 [ 102.807209][ T5891] ? dvb_demux_poll+0x220/0x220 [ 102.812160][ T5891] dvb_demux_ioctl+0x29/0x30 [ 102.816800][ T5891] __se_sys_ioctl+0xfd/0x170 [ 102.821536][ T5891] do_syscall_64+0x55/0xa0 [ 102.826358][ T5891] ? clear_bhb_loop+0x40/0x90 [ 102.831164][ T5891] ? clear_bhb_loop+0x40/0x90 [ 102.835894][ T5891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.841879][ T5891] RIP: 0033:0x7fc768f9c799 [ 102.846366][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.867761][ T5891] RSP: 002b:00007fc769e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.876712][ T5891] RAX: ffffffffffffffda RBX: 00007fc769215fa0 RCX: 00007fc768f9c799 [ 102.885234][ T5891] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 102.893284][ T5891] RBP: 00007fc769032c99 R08: 0000000000000000 R09: 0000000000000000 [ 102.901370][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.909435][ T5891] R13: 00007fc769216038 R14: 00007fc769215fa0 R15: 00007ffcbd6c8e58 [ 102.917557][ T5891] [ 102.920746][ T5891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.928074][ T5891] CPU: 0 PID: 5891 Comm: syz.0.21 Not tainted syzkaller #0 [ 102.935393][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.945489][ T5891] Call Trace: [ 102.948825][ T5891] [ 102.951823][ T5891] dump_stack_lvl+0x18c/0x250 [ 102.956559][ T5891] ? show_regs_print_info+0x20/0x20 [ 102.961814][ T5891] ? load_image+0x400/0x400 [ 102.966378][ T5891] panic+0x2dc/0x730 [ 102.970344][ T5891] ? bpf_jit_dump+0xd0/0xd0 [ 102.974999][ T5891] __warn+0x2e0/0x470 [ 102.979023][ T5891] ? __mutex_lock+0xb85/0xcc0 [ 102.983754][ T5891] ? __mutex_lock+0xb85/0xcc0 [ 102.988463][ T5891] report_bug+0x2be/0x4f0 [ 102.992839][ T5891] ? __mutex_lock+0xb85/0xcc0 [ 102.997565][ T5891] ? __mutex_lock+0xb85/0xcc0 [ 103.002294][ T5891] ? __mutex_lock+0xb87/0xcc0 [ 103.007025][ T5891] handle_bug+0xcf/0x120 [ 103.011315][ T5891] exc_invalid_op+0x1a/0x50 [ 103.015860][ T5891] asm_exc_invalid_op+0x1a/0x20 [ 103.020759][ T5891] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 103.026132][ T5891] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 103.045785][ T5891] RSP: 0018:ffffc90004acfaa0 EFLAGS: 00010246 [ 103.051892][ T5891] RAX: e729170335e67f00 RBX: ffff8880792eece0 RCX: 0000000000080000 [ 103.059904][ T5891] RDX: ffffc9000d259000 RSI: 0000000000005ec3 RDI: 0000000000005ec4 [ 103.068095][ T5891] RBP: ffffc90004acfbf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 103.076109][ T5891] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 103.084127][ T5891] R13: 1ffff92000959f64 R14: dffffc0000000000 R15: 0000000000000000 [ 103.092155][ T5891] ? trace_contention_end+0x39/0xe0 [ 103.097393][ T5891] ? __mutex_lock+0x315/0xcc0 [ 103.102117][ T5891] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 103.107806][ T5891] ? mutex_lock_nested+0x20/0x20 [ 103.112785][ T5891] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 103.118464][ T5891] ? dmx_section_feed_start_filtering+0x55/0x690 [ 103.124944][ T5891] ? mutex_lock_nested+0x20/0x20 [ 103.129929][ T5891] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 103.136154][ T5891] ? lock_chain_count+0x20/0x20 [ 103.141047][ T5891] ? _raw_spin_lock_irq+0xbb/0xf0 [ 103.146115][ T5891] as102_dvb_dmx_start_feed+0x70/0x280 [ 103.151631][ T5891] dmx_section_feed_start_filtering+0x4f5/0x690 [ 103.157924][ T5891] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 103.163521][ T5891] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 103.169111][ T5891] dvb_demux_do_ioctl+0x467/0x530 [ 103.174185][ T5891] dvb_usercopy+0x195/0x2b0 [ 103.178748][ T5891] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 103.184340][ T5891] ? dvb_generic_ioctl+0xb0/0xb0 [ 103.189321][ T5891] ? dvb_demux_poll+0x220/0x220 [ 103.194246][ T5891] dvb_demux_ioctl+0x29/0x30 [ 103.198949][ T5891] __se_sys_ioctl+0xfd/0x170 [ 103.203604][ T5891] do_syscall_64+0x55/0xa0 [ 103.208071][ T5891] ? clear_bhb_loop+0x40/0x90 [ 103.212784][ T5891] ? clear_bhb_loop+0x40/0x90 [ 103.217498][ T5891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.223425][ T5891] RIP: 0033:0x7fc768f9c799 [ 103.228057][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.247858][ T5891] RSP: 002b:00007fc769e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.256300][ T5891] RAX: ffffffffffffffda RBX: 00007fc769215fa0 RCX: 00007fc768f9c799 [ 103.264334][ T5891] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 103.272335][ T5891] RBP: 00007fc769032c99 R08: 0000000000000000 R09: 0000000000000000 [ 103.280330][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.288351][ T5891] R13: 00007fc769216038 R14: 00007fc769215fa0 R15: 00007ffcbd6c8e58 [ 103.296354][ T5891] [ 103.299985][ T5891] Kernel Offset: disabled [ 103.304319][ T5891] Rebooting in 86400 seconds..