last executing test programs: 24.851937871s ago: executing program 2 (id=3): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) r2 = dup2(r0, r1) syz_open_dev$sndctrl(&(0x7f0000000140), 0xa, 0x103002) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c}, &(0x7f0000000340), &(0x7f00000000c0), &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4621c0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$sndseq(r0, &(0x7f00000001c0)=[{0x6, 0x81, 0x3, 0x5, @time={0x9, 0x50c}, {0xa3, 0x9}, {0x1, 0x3}, @raw8={"9ec64824b004533cebed06ac"}}, {0x2, 0x2, 0x0, 0x2, @tick=0x577e1a63, {0x6, 0x2e}, {0xac, 0x28}, @note={0x5, 0x97, 0x0, 0x2, 0x14}}, {0x8, 0xe8, 0x4, 0x5, @tick=0x1, {0xe, 0xb}, {0xba, 0x10}, @control={0x3, 0xb9ad, 0x1}}, {0x54, 0x0, 0x9, 0x5, @time={0x1, 0x2}, {0x0, 0xfb}, {0x7, 0x91}, @connect={{0x4, 0x1}, {0x7f, 0xf4}}}, {0x2, 0x5, 0xff, 0x2, @time={0x9, 0x5}, {0x5}, {0x10, 0x4}, @quote={{0x0, 0xad}, 0x1, &(0x7f0000000300)={0x6, 0x92, 0x7, 0x4e, @time={0x10, 0x1ae}, {0x5, 0x7}, {0xa2, 0x7f}, @ext={0x2d, &(0x7f00000002c0)="0aba952580594e5b213c5e501d327dc7b558ee4e239886f09c9235e225fc4b473a93b170ed5f7e5540effa01ae"}}}}, {0xa, 0x4, 0xe, 0xff, @tick=0x10000, {0x1, 0x81}, {0xf, 0x2a}, @note={0x5, 0x81, 0x5, 0x1, 0x1}}], 0xa8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'netpci0\x00', 0x3}, 0x18) 22.365180265s ago: executing program 2 (id=7): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbd) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x46, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x48, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8003, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="1110"], 0x18) sendto$inet6(r6, 0x0, 0x0, 0x20004001, &(0x7f0000000380)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)) 20.856524096s ago: executing program 1 (id=2): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000100e83ac553", 0x1a, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 19.978103271s ago: executing program 1 (id=8): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0}) 16.762489037s ago: executing program 1 (id=11): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) socket(0x1e, 0x80000, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xfdef) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x400100, 0x1000, 0xfffffffa, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_URING_CMD128=@ublk_cmd_sqes=@ublk_stop_dev_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x8001}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2eb, 0x0, 0x0, 0x1000, 0x168ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x3000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0x1, 0x0, 0x85, 0x0, 0xb}, {0x0, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x5, 0x6, 0x1, 0x4, 0x9c, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0xf, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x6, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x9, 0x0, 0x8}, {0x4000, 0x25000, 0xc, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x8a}, {0x10000, 0x10000, 0x0, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x2, 0x96}, {0x70000, 0x405}, {0x80a0000, 0xff81}, 0xe0010039, 0x0, 0x6000, 0x100061, 0x5, 0xa800, 0x2000, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') lseek(r8, 0xffffff60, 0x1) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x6, 0x2019, 0x0, 0x4, 0x4, 0x0, 0x6}}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 13.691002044s ago: executing program 4 (id=15): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 13.547653483s ago: executing program 0 (id=16): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x6145, 0x7721, 0x17, 0x0, 0x0) 12.525962843s ago: executing program 3 (id=17): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r3, 0x0, 0x1, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10001}) 11.965904789s ago: executing program 3 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, '\\', 'S\'w', 0x2}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x109480, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000180)={0xd5, 0x6, 0x12c, 0x0, "8935a5a852b6c1d7e05f649b1cc6464fe1f773cfa2baae0196b6fd91420f656057cae743bf944d110c5c57ad0b34f4b3ebd84ef586f50a69cd074326fa9e11cfe5475a8ea912bbe036858a9244f0e91bf1077987de8c998d91aa7b0c95bf9b8a4722da0d448a73a46debec15289179e04945486452bec44e81d7aa08d60785215e055fa6bce35280bbc31fac0cadef5b6f22a161f681a78e8da4b922b36f5143545cd8e8674c3aa236e5a8e673bdde60db72892038968bc2fb4c614e90"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) sendfile(r4, r4, 0x0, 0x8) bind(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/dev/iommu\x00'}]}, 0x17) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002a10c8f08120a105d0b70010203010902390001040090100904"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) r6 = fsopen(&(0x7f0000000080)='erofs\x00', 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 11.347896647s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x5, @string={0x5, 0x3, "fe6b5c"}}}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x2}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000400), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0x0, 0x2, 0xd, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x10, 0x7a5, 0xa, 0x9, 0x401, 'geneve0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x240}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a9f3fcebb5c01342e6201329b081ffd56d6a8fedae1e9c3ff1ec594fa421"}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 0x1, 0xc, {@empty, {[0xff, 0xff, 0x44e0dc1dd6894b27, 0x0, 0x0, 0x80]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x41a, 0x80, 0x5, 0x400, 0xfff7, 0x7f, 'gretap0\x00', 'veth1\x00', {}, {}, 0x0, 0x48}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@private=0xa010101, @loopback, 0xff, 0xffff00, 0xd, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}, {[0x0, 0xff, 0x7f, 0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x101, 0x7, 0x9, 0x7, 0x48, 0x7a00, 'geneve0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0xa7, {0x618}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008c4000/0x3000)=nil, &(0x7f000048e000/0x14000)=nil, &(0x7f0000e9d000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000032d000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ac8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cc5000/0x4000)=nil, &(0x7f0000015000/0x2000)=nil, &(0x7f000044b000/0x4000)=nil, &(0x7f0000000000)="7da5b3370cf683302e823b67b1979f50cf476dd16f223d4510b2ecb10f241ce4a77e13c2eb8333677552a9a5027b53d1eedce2872a9e4a885cd0b1fb0f41c6ad4907", 0x42, r2}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 10.715013889s ago: executing program 2 (id=20): socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10.251055283s ago: executing program 4 (id=21): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xb, 0x2, "f690"}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, 0x0, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xbe0d}, 0x0, 0x0, 0x0}) 8.883359612s ago: executing program 0 (id=22): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x1d, 0x6}, {0x80, 0x0, 0x0, 0xfffff010}, {0x6, 0x8, 0x0, 0x2}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff06ffffaf64000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, 0x2, {0xfffffff8, 0xfffe}}}}}}}}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xf8e, 0x1, {"4c37c1be15766b571e6d243b7036e52f"}, 0x1, 0x1, 0x8000000000000000}}}, 0xa0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0x1000}, 0x49}], 0x1, 0x40010102, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) 8.335085841s ago: executing program 3 (id=23): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.642096847s ago: executing program 0 (id=24): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r0], 0x0) 7.093409651s ago: executing program 4 (id=25): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x20a0}, {r0, 0x8201}, {r0, 0x200}, {0xffffffffffffffff, 0x2}, {r0, 0x8101}], 0x5, &(0x7f0000000340), &(0x7f0000000380)={[0x4]}, 0x8) 6.987512875s ago: executing program 1 (id=26): syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x2, 0x24, 0x66, 0x0, 0x9, 0x1, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x7, 0x1e, [@local]}]}}, @address_reply}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1b) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x100, 0x7, 0x25, 0x7f}, 0x10) 6.842778163s ago: executing program 0 (id=27): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab4080905070210007fdc14090401"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002020000083905a1a440000102030109026600020100400f0904000001020d00000a240600010470d7fe030524000c000d240f0102000000090007000506241a100032052401000a0905810310000608060904010000020d00000904010102020d0000090582"], &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x9c, 0x6, 0x1, 0x40, 0x4}, 0x18f, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x5, [{0x2, &(0x7f0000000780)=@string={0x2}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xc4, &(0x7f0000000880)=@string={0xc4, 0x3, "9d0e2aa827ab37d06939fb606dbf1fadab9370288d829203023057fc7885a01fd3db51b9de9cd0acf19a3216b10c0301b11d0e16822c7eb94aef3d393519e8ad8e8a0d318d9953622b05fa4b86aa745925a4c9433152d233d3f80b7cd786b2e90c990a8fc3a653bcda4a68e3c2d4a57ffaf85e152adef8fa4dfb2c5e0373ad695b5060cf13bc8b4119699b36140550ede7af16edcd8f5df99004c7ccec153443538493df2d9cac0f1b26e6bfce8249af2928c595d132d9ad4bd13337045557c744d6"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "bb6d29533601e3c85c96952bf9e9cd2e89d2d1ffa9bf38660cd2a8bc60cc58a3795bf3a0c9f73bb5c15b03b307371dbb487eefa5825cdd4b1d430de3af9bcb21bcf584e7b364bc4a313c841ad5e06c46a068ecc352e01d98b9de51ea0298f5830d4b64ee498b667629e3e658293fc670f651ec1ba2b7017afdbcdb492631ee26d1d5acaed53697119408494c69ab5c8a4040060c0fb8c57cfe418cefc507e4660559cf51c968643f1c900fe8494ae78d6447d96c9a2fa82857b130a7d4a606a2cf691837c8379ebdfa647fdeb892fd19a36a231b7d1a1b79fc5d61c386e4b2571741d5a0"}}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x80, 0x8, 0x5, 0x1, {{0x5, 0x4, 0x2, 0x18, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @empty}}}}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000b40)={0x0, 0x200}) r5 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006"], 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x7c) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2800) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r3, 0x36) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000000000000a004e2400000009fe8000000000000000000000000000bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000080000000a004e22000000000000000000000000000080000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000004cfe80000000000000000000000000001604000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23fffffff9fc01000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000080000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002fc02000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000020000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000006fe80000000000000000000000000003404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fe880000000000000000000000000101ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0300"/1168], 0x490) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00') syz_io_uring_setup(0x7798, &(0x7f00000005c0)={0x0, 0x2db3, 0x200, 0x1, 0x23, 0x0, r9}, &(0x7f0000000640), &(0x7f00000006c0), &(0x7f0000000700)) 6.564230613s ago: executing program 4 (id=28): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10001}) 5.601910596s ago: executing program 4 (id=29): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x6145, 0x7721, 0x17, 0x0, 0x0) 4.812785649s ago: executing program 3 (id=30): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f00000002c0), 0x4800) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 4.048101095s ago: executing program 3 (id=31): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004844}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, 0x0, 0x0, 0x8, 0xfffffffffffffd43}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x10000, 0x6, 0x2, 0x0, 0x2], [0x6, 0x0, 0x0, 0xffffff7f, 0x5, 0x0, 0x4, 0xfffffffe]], '\x00', [{0x0, 0xfe5b}, {0xfffffffd}, {0x0, 0x800}, {0xfffffffe, 0x9, 0x0, 0x1, 0x1}, {0x0, 0xffffffff, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x2048, 0x5}, {}, {0x0, 0x4}, {0x8000000}, {0x0, 0x2}, {0x0, 0x9}], '\x00', 0x1000}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.768706783s ago: executing program 3 (id=32): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab4080905070210007fdc14090401"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002020000083905a1a440000102030109026600020100400f0904000001020d00000a240600010470d7fe030524000c000d240f0102000000090007000506241a100032052401000a0905810310000608060904010000020d00000904010102020d0000090582021000030304090503022000100100"], &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x9c, 0x6, 0x1, 0x40, 0x4}, 0x18f, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x5, [{0x0, 0x0}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xc3, &(0x7f0000000880)=@string={0xc3, 0x3, "9d0e2aa827ab37d06939fb606dbf1fadab9370288d829203023057fc7885a01fd3db51b9de9cd0acf19a3216b10c0301b11d0e16822c7eb94aef3d393519e8ad8e8a0d318d9953622b05fa4b86aa745925a4c9433152d233d3f80b7cd786b2e90c990a8fc3a653bcda4a68e3c2d4a57ffaf85e152adef8fa4dfb2c5e0373ad695b5060cf13bc8b4119699b36140550ede7af16edcd8f5df99004c7ccec153443538493df2d9cac0f1b26e6bfce8249af2928c595d132d9ad4bd13337045557c744"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "bb6d29533601e3c85c96952bf9e9cd2e89d2d1ffa9bf38660cd2a8bc60cc58a3795bf3a0c9f73bb5c15b03b307371dbb487eefa5825cdd4b1d430de3af9bcb21bcf584e7b364bc4a313c841ad5e06c46a068ecc352e01d98b9de51ea0298f5830d4b64ee498b667629e3e658293fc670f651ec1ba2b7017afdbcdb492631ee26d1d5acaed53697119408494c69ab5c8a4040060c0fb8c57cfe418cefc507e4660559cf51c968643f1c900fe8494ae78d6447d96c9a2fa82857b130a7d4a606a2cf691837c8379ebdfa647fdeb892fd19a36a231b7d1a1b79fc5d61c386e4b2571741d5a0"}}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x80, 0x8, 0x5, 0x1, {{0x5, 0x4, 0x2, 0x18, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @empty}}}}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000800)={0x40, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000b40)={r5, 0x200}) r6 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006"], 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x7c) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2800) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r3, 0x36) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000000000000a004e2400000009fe8000000000000000000000000000bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000080000000a004e22000000000000000000000000000080000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000004cfe80000000000000000000000000001604000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23fffffff9fc01000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000080000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002fc02000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000020000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000006fe80000000000000000000000000003404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fe880000000000000000000000000101ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0300"/1168], 0x490) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00') syz_io_uring_setup(0x7798, &(0x7f00000005c0)={0x0, 0x2db3, 0x200, 0x1, 0x23, 0x0, r10}, &(0x7f0000000640), &(0x7f00000006c0), &(0x7f0000000700)) 2.67537164s ago: executing program 1 (id=33): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.642776124s ago: executing program 0 (id=34): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) socket(0x1e, 0x80000, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xfdef) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x400100, 0x1000, 0xfffffffa, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_URING_CMD128=@ublk_cmd_sqes=@ublk_stop_dev_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x8001}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2eb, 0x0, 0x0, 0x1000, 0x168ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x3000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0x1, 0x0, 0x85, 0x0, 0xb}, {0x0, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x5, 0x6, 0x1, 0x4, 0x9c, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0xf, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x6, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x9, 0x0, 0x8}, {0x4000, 0x25000, 0xc, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x8a}, {0x10000, 0x10000, 0x0, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x2, 0x96}, {0x70000, 0x405}, {0x80a0000, 0xff81}, 0xe0010039, 0x0, 0x6000, 0x100061, 0x5, 0xa800, 0x2000, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') lseek(r10, 0xffffff60, 0x1) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x6, 0x2019, 0x0, 0x4, 0x4, 0x0, 0x6}}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 447.445505ms ago: executing program 4 (id=35): r0 = syz_usbip_server_init(0x2) syz_usb_connect(0x1, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000002e80)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x92a0}, 0x5, 0x0, 0x8de4, 0x7b, 0xff, 0x0, "", [{0x3, 0x3ff, 0x6, 0x9}, {0x8, 0x7, 0xa4, 0x7}, {0x9, 0x9, 0x0, 0x9}, {0x10, 0x400, 0x3, 0x17f1}, {0x3, 0x10000, 0x515886e3, 0x3e560229}, {0x2, 0x1, 0x9, 0x7}, {0x4, 0x401, 0x2, 0x9}, {0x9, 0x0, 0x9, 0x1}, {0xfffffffe, 0xec, 0xc, 0x7}, {0x1ff, 0x0, 0x873b, 0x74}, {0x1000, 0x2, 0x7, 0xb9}, {0x8, 0x787a, 0x1, 0xd4a6}, {0x4, 0x1, 0x7, 0x7}, {0x7ff, 0x3ff, 0xf, 0x3}, {0x800, 0x10000, 0x2, 0x4}, {0x8, 0x10, 0x1, 0xc}, {0x1, 0x6c1d, 0x988, 0xff}, {0x6, 0x3844, 0xf, 0x3ff}, {0x7, 0x3, 0x0, 0x6}, {0x9, 0x9, 0x401, 0x9401}, {0xd, 0x4, 0x5, 0xcf}, {0x29, 0x7, 0x0, 0x6}, {0xfff, 0x4, 0x1, 0x7fffffff}, {0x3, 0x100, 0xfffffff7, 0x9}, {0x9, 0x8, 0xfffffeff, 0x6b}, {0x8, 0x6, 0x8, 0x5}, {0x9, 0x0, 0x6, 0x7}, {0xffff, 0xa021, 0x80000000, 0x7}, {0x9, 0xfffffcf0, 0x6, 0x8000}, {0x8, 0x24d9, 0x0, 0x6}, {0x6a, 0xfdd, 0xf, 0x40000}, {0x9, 0x2, 0x3b9, 0x6}, {0x9, 0x8, 0x2c064a6f}, {0x9, 0xff, 0x3, 0x5}, {0x9, 0x6, 0x200, 0x9}, {0x1, 0x6, 0x80000000, 0x40}, {0x8, 0x5, 0x4, 0x95b}, {0x3, 0x5, 0x7f, 0xfffffffc}, {0xdb83, 0x6, 0x4, 0xfffffff8}, {0x34e, 0x2, 0xb6, 0x1}, {0x8, 0x6, 0x0, 0x7f}, {0x95, 0x0, 0x8d, 0x8}, {0x6, 0x2, 0x1, 0x3}, {0x80, 0x9, 0x2, 0x4}, {0x0, 0xd5400000, 0x0, 0xb}, {0x1, 0x99d, 0x9, 0x287a}, {0xee64, 0x1000, 0x0, 0xc311}, {0xffffffc0, 0x9, 0xfffffffe}, {0x2, 0x200, 0x7, 0x1}, {0x8, 0x5, 0x6, 0x3}, {0x8, 0x8, 0x2}, {0x3ff, 0x7, 0x8, 0x3}, {0xa4, 0x9, 0x2, 0x40}, {0x1, 0x7d4c3a4e, 0x4, 0x3}, {0x77b, 0x80, 0x3, 0x5}, {0x3, 0x80000000, 0x320a, 0x3a71}, {0x70, 0x1, 0x7}, {0x91, 0xfffffffe, 0x80000000, 0x1}, {0x100, 0x14, 0xffffffff, 0x7}, {0x5, 0x7ff, 0x475, 0x1d7}, {0x3, 0x1, 0x0, 0x561}, {0xde, 0x6, 0x9, 0x7}, {0xdb, 0x6, 0x4, 0xfa}, {0x4, 0x6, 0x5, 0x401}, {0xd, 0x6, 0x5b, 0x8}, {0x9, 0x6, 0x8001, 0xd8}, {0xe88, 0xf942, 0x1000, 0xa515}, {0x7, 0x7, 0x400, 0x7f}, {0x4, 0xb, 0x3, 0xb6f}, {0x200, 0x50cac307, 0x0, 0x7}, {0x5, 0xa91b, 0x6, 0x7f}, {0x5, 0x7, 0x0, 0x3}, {0xffff, 0x5, 0xfffffffd, 0x1}, {0x3ff, 0x0, 0x1, 0x5}, {0xfffff800, 0x3, 0x10000, 0x8}, {0xfffffff5, 0x0, 0x1, 0x200}, {0xffffffff, 0x3, 0x7, 0x1}, {0x10001, 0x1, 0x2, 0x1}, {0x40, 0x9, 0x7fffffff, 0x7}, {0x8, 0x9, 0x7fff, 0x7}, {0x400, 0x8, 0x9, 0x5}, {0x0, 0x95, 0x5, 0x4}, {0xdce, 0x7fffffff, 0x8, 0x10000}, {0x9, 0x3, 0x2, 0x3}, {0xb2, 0xc463, 0x4, 0xfffffff0}, {0x3, 0x3f, 0x7, 0x3ff}, {0xf, 0x3, 0x7, 0x2}, {0x9, 0x5, 0x0, 0x9}, {0x1, 0xe1f, 0x4, 0xa6e}, {0x1, 0xcb29, 0xb, 0xa8bc}, {0x4, 0xfffffffe, 0xffff0000, 0x8}, {0x7fff, 0x1, 0x8, 0x4}, {0x9, 0x9881, 0x0, 0x8}, {0x3, 0x8, 0x8, 0xed6}, {0x1000, 0x0, 0x8, 0xfffffff8}, {0xfffffff7, 0x10000, 0x6, 0x9}, {0x2, 0x101, 0x2, 0x2}, {0x2, 0x4, 0x80, 0x8000}, {0xf007, 0x6, 0x3, 0x6}, {0x0, 0xffff, 0xe, 0x6}, {0x6, 0xe, 0xfa}, {0x7, 0xfffffffa, 0x6, 0x4}, {0x9, 0xfffffffc, 0x5, 0x1}, {0x1, 0x2, 0xd4, 0x2}, {0x5, 0x73, 0x21f8, 0x9}, {0x10001, 0x4b87, 0x3ff, 0xd}, {0x80000000, 0xf, 0x1, 0x6}, {0x1f, 0xffffffff, 0x4, 0x1}, {0x3, 0x8, 0xfff, 0x80000000}, {0x3, 0x3, 0x0, 0x9}, {0x1, 0xb, 0x200}, {0x3ff, 0x8, 0x400, 0xfdf}, {0x47, 0x668, 0x9, 0xd}, {0x80, 0xffffffff, 0xb70d, 0x1}, {0xd, 0x6, 0x3, 0x5a81}, {0x9b8f, 0x80000000, 0x4, 0x6}, {0x0, 0x3ff, 0xffff, 0xfffffff9}, {0x0, 0x6, 0x9, 0x7}, {0x28a0, 0xa, 0xfffff800, 0x29b}, {0x3, 0xfffffffa, 0x3}, {0x4, 0xb, 0xd, 0x1}, {0x2, 0x5a85, 0x2f, 0x2d2}, {0x0, 0x739, 0x3, 0x7}]}, 0x7e0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x300}}) syz_ublk_setup_io_uring(0x7cb8, 0x0, 0x0, &(0x7f00000000c0), 0x0) socket(0x80000000000000a, 0x2, 0x0) 398.474225ms ago: executing program 1 (id=36): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=37): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r0], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 87.222479][ T820] cfg80211: failed to load regulatory.db [ 89.595871][ T5584] cgroup: Unknown subsys name 'net' [ 89.838940][ T5584] cgroup: Unknown subsys name 'cpuset' [ 89.911963][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.895314][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.105101][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.143863][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.152210][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.155107][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.162811][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.184897][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.186300][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.187030][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.187767][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.200635][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.203593][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.210037][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.215053][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.215701][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.216089][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.229531][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.235597][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.238203][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.250874][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.272551][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.289580][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.309429][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.311804][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.319420][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.326614][ T4913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.323020][ T5613] Bluetooth: hci0: command tx timeout [ 98.323440][ T5613] Bluetooth: hci3: command tx timeout [ 98.411231][ T5608] Bluetooth: hci1: command tx timeout [ 98.411427][ T5608] Bluetooth: hci2: command tx timeout [ 98.411519][ T5608] Bluetooth: hci4: command tx timeout [ 99.073092][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.074217][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.074338][ T5605] bridge_slave_0: entered allmulticast mode [ 99.076057][ T5605] bridge_slave_0: entered promiscuous mode [ 99.100714][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.100848][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.101004][ T5603] bridge_slave_0: entered allmulticast mode [ 99.104557][ T5603] bridge_slave_0: entered promiscuous mode [ 99.113304][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.113426][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.113587][ T5604] bridge_slave_0: entered allmulticast mode [ 99.116380][ T5604] bridge_slave_0: entered promiscuous mode [ 99.150821][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.150947][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.151716][ T5605] bridge_slave_1: entered allmulticast mode [ 99.156178][ T5605] bridge_slave_1: entered promiscuous mode [ 99.189970][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.190104][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.190350][ T5603] bridge_slave_1: entered allmulticast mode [ 99.202519][ T5603] bridge_slave_1: entered promiscuous mode [ 99.204295][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.204426][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.204985][ T5604] bridge_slave_1: entered allmulticast mode [ 99.212687][ T5604] bridge_slave_1: entered promiscuous mode [ 99.216360][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.216483][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.216669][ T5602] bridge_slave_0: entered allmulticast mode [ 99.219736][ T5602] bridge_slave_0: entered promiscuous mode [ 99.247344][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.247467][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.247631][ T5606] bridge_slave_0: entered allmulticast mode [ 99.255090][ T5606] bridge_slave_0: entered promiscuous mode [ 99.307082][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.307228][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.307366][ T5602] bridge_slave_1: entered allmulticast mode [ 99.309204][ T5602] bridge_slave_1: entered promiscuous mode [ 99.332577][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.332770][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.332934][ T5606] bridge_slave_1: entered allmulticast mode [ 99.336324][ T5606] bridge_slave_1: entered promiscuous mode [ 99.398673][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.420179][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.436135][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.458143][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.479730][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.484027][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.492689][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.516915][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.557444][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.576628][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.622416][ T5605] team0: Port device team_slave_0 added [ 99.639819][ T5603] team0: Port device team_slave_0 added [ 99.646595][ T5604] team0: Port device team_slave_0 added [ 99.665835][ T5605] team0: Port device team_slave_1 added [ 99.686157][ T5603] team0: Port device team_slave_1 added [ 99.688005][ T5604] team0: Port device team_slave_1 added [ 99.689904][ T5602] team0: Port device team_slave_0 added [ 99.714387][ T5606] team0: Port device team_slave_0 added [ 99.745768][ T5602] team0: Port device team_slave_1 added [ 99.766709][ T5606] team0: Port device team_slave_1 added [ 99.807890][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.807903][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.807917][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.831687][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.831704][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.831726][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.836585][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.836601][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.836623][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.865466][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.865490][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.865513][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.894487][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.894504][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.894526][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.896163][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.896175][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.896196][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.899457][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.899479][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.899502][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.920249][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.920265][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.920288][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.998380][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.998397][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.998421][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.009733][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.009750][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.009773][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.306656][ T5605] hsr_slave_0: entered promiscuous mode [ 100.307758][ T5605] hsr_slave_1: entered promiscuous mode [ 100.331853][ T5604] hsr_slave_0: entered promiscuous mode [ 100.332697][ T5604] hsr_slave_1: entered promiscuous mode [ 100.333402][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 100.333487][ T5604] Cannot create hsr debugfs directory [ 100.360889][ T5603] hsr_slave_0: entered promiscuous mode [ 100.362712][ T5603] hsr_slave_1: entered promiscuous mode [ 100.364268][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 100.364309][ T5603] Cannot create hsr debugfs directory [ 100.401522][ T5613] Bluetooth: hci3: command tx timeout [ 100.401536][ T5608] Bluetooth: hci0: command tx timeout [ 100.413931][ T5602] hsr_slave_0: entered promiscuous mode [ 100.415341][ T5602] hsr_slave_1: entered promiscuous mode [ 100.416375][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 100.416399][ T5602] Cannot create hsr debugfs directory [ 100.483118][ T5613] Bluetooth: hci4: command tx timeout [ 100.483146][ T4913] Bluetooth: hci1: command tx timeout [ 100.483255][ T5608] Bluetooth: hci2: command tx timeout [ 100.878872][ T5606] hsr_slave_0: entered promiscuous mode [ 100.879737][ T5606] hsr_slave_1: entered promiscuous mode [ 100.880312][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 100.880328][ T5606] Cannot create hsr debugfs directory [ 101.670563][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.730777][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.743264][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.786935][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.800069][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.827037][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.856097][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.884773][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.029814][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.066200][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.075839][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.115817][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.119737][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.139228][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.171963][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.217058][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.369108][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.395942][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.418300][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.456438][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.464868][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.482037][ T5608] Bluetooth: hci0: command tx timeout [ 102.482082][ T5608] Bluetooth: hci3: command tx timeout [ 102.513239][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.542935][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.561467][ T4913] Bluetooth: hci4: command tx timeout [ 102.561529][ T5614] Bluetooth: hci1: command tx timeout [ 102.561619][ T5613] Bluetooth: hci2: command tx timeout [ 102.594405][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.742739][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.777181][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.799017][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.836415][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.849983][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.874593][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.901345][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.946342][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.034091][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.120412][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.158362][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.170169][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.199573][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.216119][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.255151][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.271006][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.294948][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.306826][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.365109][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.365288][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.409550][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.440938][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.441038][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.538580][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.592152][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.592384][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.641852][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.669922][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.670026][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.823875][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.906902][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.944270][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.947981][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.050014][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.050171][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.155099][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.205197][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.249518][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.250334][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.325652][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.325732][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.444064][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.549091][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.550820][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.561257][ T5613] Bluetooth: hci3: command tx timeout [ 104.561339][ T5613] Bluetooth: hci0: command tx timeout [ 104.630136][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.630315][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.641414][ T5613] Bluetooth: hci2: command tx timeout [ 104.641446][ T5613] Bluetooth: hci1: command tx timeout [ 104.654008][ T5608] Bluetooth: hci4: command tx timeout [ 105.242093][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.640721][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.692041][ T5605] veth0_vlan: entered promiscuous mode [ 105.870040][ T5605] veth1_vlan: entered promiscuous mode [ 106.127981][ T5606] veth0_vlan: entered promiscuous mode [ 106.210932][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.220624][ T5605] veth0_macvtap: entered promiscuous mode [ 106.280946][ T5606] veth1_vlan: entered promiscuous mode [ 106.313908][ T5605] veth1_macvtap: entered promiscuous mode [ 106.424187][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.497345][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.609702][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.675205][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.716961][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.731228][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.736672][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.764471][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.769206][ T5606] veth0_macvtap: entered promiscuous mode [ 106.910199][ T5606] veth1_macvtap: entered promiscuous mode [ 107.127708][ T5603] veth0_vlan: entered promiscuous mode [ 107.151949][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.204852][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.273481][ T5603] veth1_vlan: entered promiscuous mode [ 107.302594][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.321788][ T5602] veth0_vlan: entered promiscuous mode [ 107.328547][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.345116][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.354959][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.363265][ T5604] veth0_vlan: entered promiscuous mode [ 107.376531][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.376551][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.499003][ T5602] veth1_vlan: entered promiscuous mode [ 107.559367][ T5604] veth1_vlan: entered promiscuous mode [ 107.578393][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.578416][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.798300][ T5603] veth0_macvtap: entered promiscuous mode [ 107.870732][ T5603] veth1_macvtap: entered promiscuous mode [ 108.016964][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.016986][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.028790][ T5602] veth0_macvtap: entered promiscuous mode [ 108.132824][ T5602] veth1_macvtap: entered promiscuous mode [ 108.142561][ T5604] veth0_macvtap: entered promiscuous mode [ 108.201682][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.226586][ T5604] veth1_macvtap: entered promiscuous mode [ 108.263390][ T3307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.263413][ T3307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.270577][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.339430][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.435055][ T209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.460141][ T209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.476347][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.477456][ T209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.529364][ T209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.541986][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.664990][ T3331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.686459][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.690022][ T3331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.763648][ T3331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.842548][ T3331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.913717][ T1665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.972570][ T1665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.235597][ T3331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.297486][ T3331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.796311][ T5803] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 109.903144][ T5617] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.122953][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.122970][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.182695][ T5617] usb 4-1: Using ep0 maxpacket: 8 [ 110.214275][ T5617] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 110.290660][ T5617] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 110.290681][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.290692][ T5617] usb 4-1: Product: syz [ 110.290700][ T5617] usb 4-1: Manufacturer: syz [ 110.290708][ T5617] usb 4-1: SerialNumber: syz [ 110.388234][ T5617] usb 4-1: config 0 descriptor?? [ 110.480087][ T5617] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 111.245589][ T1524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.245621][ T1524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.573954][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.573974][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.793971][ T3276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.793995][ T3276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.370506][ T1524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.370527][ T1524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.544045][ T5617] gspca_zc3xx: reg_r err -32 [ 112.598946][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.598970][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.131238][ T5617] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 113.131338][ T5617] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 113.860000][ T820] usb 4-1: USB disconnect, device number 2 [ 114.632860][ T5733] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.823623][ T5733] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 114.823645][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.823657][ T5733] usb 2-1: Product: syz [ 114.823665][ T5733] usb 2-1: Manufacturer: syz [ 114.823673][ T5733] usb 2-1: SerialNumber: syz [ 114.874242][ T5821] bridge_slave_0: left allmulticast mode [ 114.874277][ T5821] bridge_slave_0: left promiscuous mode [ 114.908748][ T5733] usb 2-1: config 0 descriptor?? [ 114.938465][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.942183][ T5821] bridge_slave_1: left allmulticast mode [ 115.962719][ T5821] bridge_slave_1: left promiscuous mode [ 115.963082][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.141827][ T5733] usb 2-1: Firmware version (0.0) predates our first public release. [ 116.141856][ T5733] usb 2-1: Please update to version 0.2 or newer [ 116.719844][ T5821] bond0: (slave bond_slave_0): Releasing backup interface [ 117.108096][ T5821] bond0: (slave bond_slave_1): Releasing backup interface [ 117.290885][ T37] audit: type=1326 audit(1784174535.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.1.11" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb221ffde59 code=0x7ffc0000 [ 117.290943][ T37] audit: type=1326 audit(1784174535.404:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.1.11" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fb221ffde59 code=0x7ffc0000 [ 117.290969][ T37] audit: type=1326 audit(1784174535.404:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.1.11" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb221ffde59 code=0x7ffc0000 [ 117.290992][ T37] audit: type=1326 audit(1784174535.404:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.1.11" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb221ffde59 code=0x7ffc0000 [ 117.293603][ T37] audit: type=1326 audit(1784174535.434:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.1.11" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb221ffde59 code=0x7ffc0000 [ 117.536515][ T5821] team0: Port device team_slave_0 removed [ 117.648017][ T5844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.648038][ T5844] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 117.650318][ T5821] team0: Port device team_slave_1 removed [ 117.652160][ T5806] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 117.653091][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.653114][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.732065][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.732096][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.773549][ T5821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.859660][ T5806] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.859689][ T5806] usb 1-1: config 0 has no interface number 0 [ 117.906264][ T5806] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 117.906289][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.906300][ T5806] usb 1-1: Product: syz [ 117.906308][ T5806] usb 1-1: Manufacturer: syz [ 117.906316][ T5806] usb 1-1: SerialNumber: syz [ 117.994781][ T5806] usb 1-1: config 0 descriptor?? [ 118.302461][ T5806] usb 1-1: selecting invalid altsetting 1 [ 118.302984][ T5806] dvb_ttusb_budget: ttusb_init_controller: error [ 118.303076][ T5806] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 118.816678][ T5844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.816707][ T5844] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 119.560406][ T5733] usb 2-1: USB disconnect, device number 2 [ 119.603705][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.603733][ T5844] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 120.039016][ T5844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.039040][ T5844] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 120.577378][ T5806] DVB: Unable to find symbol stv0299_attach() [ 120.622921][ T5844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.622945][ T5844] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.067283][ T5806] DVB: Unable to find symbol tda8083_attach() [ 121.067299][ T5806] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 121.200542][ T5860] syzkaller0: entered promiscuous mode [ 121.200563][ T5860] syzkaller0: entered allmulticast mode [ 121.219196][ T5806] usb 1-1: USB disconnect, device number 2 [ 122.482228][ T5806] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.655343][ T5806] usb 4-1: Using ep0 maxpacket: 8 [ 122.670620][ T5806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.676281][ T5806] usb 4-1: config index 0 descriptor too short (expected 57, got 27) [ 122.676309][ T5806] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 122.713081][ T5806] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 122.713103][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.713114][ T5806] usb 4-1: Product: syz [ 122.713122][ T5806] usb 4-1: Manufacturer: syz [ 122.713130][ T5806] usb 4-1: SerialNumber: syz [ 122.721942][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.962327][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 122.990526][ T10] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 122.990559][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.990578][ T10] usb 1-1: Product: syz [ 122.990592][ T10] usb 1-1: Manufacturer: syz [ 122.990606][ T10] usb 1-1: SerialNumber: syz [ 123.057314][ T10] usb 1-1: config 0 descriptor?? [ 123.297059][ T5873] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 123.310774][ T10] usb 1-1: ignoring: not an USB2CAN converter [ 123.421460][ T5880] Zero length message leads to an empty skb [ 123.933378][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.980239][ T5806] usb 4-1: USB disconnect, device number 3 [ 124.111588][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 124.116267][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.116360][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.116403][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.116427][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.138794][ T890] usb 1-1: USB disconnect, device number 3 [ 124.268109][ T10] usb 5-1: config 0 descriptor?? [ 124.307939][ T10] hub 5-1:0.0: USB hub found [ 124.557083][ T10] hub 5-1:0.0: 1 port detected [ 125.439799][ T10] hub 5-1:0.0: activate --> -90 [ 125.855758][ T10] usb 5-1-port1: cannot reset (err = -71) [ 125.856556][ T10] usb 5-1-port1: cannot reset (err = -71) [ 125.857639][ T10] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 125.877905][ T5615] usb 5-1: USB disconnect, device number 2 [ 125.904306][ T5732] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.905417][ T10] usb 5-1-port1: cannot disable (err = -71) [ 125.906103][ T10] usb 5-1-port1: attempt power cycle [ 126.141266][ T5732] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 126.141300][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.141320][ T5732] usb 4-1: Product: syz [ 126.141333][ T5732] usb 4-1: Manufacturer: syz [ 126.141348][ T5732] usb 4-1: SerialNumber: syz [ 126.801903][ T5732] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 126.801974][ T5732] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 127.511253][ T890] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.647081][ T5732] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 127.647144][ T5732] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 127.712407][ T5732] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 127.740541][ T890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.756867][ T890] usb 1-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 127.756903][ T890] usb 1-1: config 66 interface 0 has no altsetting 0 [ 127.781944][ T890] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 127.781973][ T890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.781990][ T890] usb 1-1: Product: syz [ 127.782003][ T890] usb 1-1: Manufacturer: syz [ 127.782015][ T890] usb 1-1: SerialNumber: syz [ 127.931166][ T5732] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 128.010891][ T5902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.335382][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.348258][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.405155][ T5904] bridge_slave_0: left allmulticast mode [ 128.405201][ T5904] bridge_slave_0: left promiscuous mode [ 128.429560][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.823379][ T5611] usb 4-1: USB disconnect, device number 4 [ 129.169085][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.169660][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.275618][ T5904] bridge_slave_1: left allmulticast mode [ 129.275656][ T5904] bridge_slave_1: left promiscuous mode [ 129.360079][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.591825][ T890] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 129.752317][ T890] usb 1-1: USB disconnect, device number 4 [ 130.169555][ T5904] bond0: (slave bond_slave_0): Releasing backup interface [ 130.355362][ T5904] bond0: (slave bond_slave_1): Releasing backup interface [ 130.610816][ T5904] team0: Port device team_slave_0 removed [ 130.791414][ T5904] team0: Port device team_slave_1 removed [ 130.792212][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.792229][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.842767][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.843998][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.889965][ T5904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.108165][ T5921] syzkaller0: entered promiscuous mode [ 131.108195][ T5921] syzkaller0: entered allmulticast mode [ 131.227967][ T37] audit: type=1326 audit(1784174549.364:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.228431][ T37] audit: type=1326 audit(1784174549.364:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.228678][ T37] audit: type=1326 audit(1784174549.364:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.229051][ T37] audit: type=1326 audit(1784174549.364:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.229294][ T37] audit: type=1326 audit(1784174549.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.229720][ T37] audit: type=1326 audit(1784174549.364:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.230864][ T37] audit: type=1326 audit(1784174549.364:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f998be8de59 code=0x7ffc0000 [ 131.483896][ T5732] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.561466][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.648840][ T5732] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.648871][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.648890][ T5732] usb 2-1: Product: syz [ 131.648904][ T5732] usb 2-1: Manufacturer: syz [ 131.648913][ T5732] usb 2-1: SerialNumber: syz [ 131.701252][ T5701] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.910048][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.945335][ T5701] usb 4-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 131.946252][ T5701] usb 4-1: config 66 interface 0 has no altsetting 0 [ 132.019465][ T5701] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 132.019497][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.019516][ T5701] usb 4-1: Product: syz [ 132.019529][ T5701] usb 4-1: Manufacturer: syz [ 132.019543][ T5701] usb 4-1: SerialNumber: syz [ 132.103952][ T5939] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.164266][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 132.164593][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 132.347458][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.350326][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.506545][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.510621][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.590165][ T5701] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 132.690583][ T5701] usb 4-1: USB disconnect, device number 5 [ 132.777614][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 132.777676][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.778323][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.046182][ T5732] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 133.307146][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.307240][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.340364][ T5701] usb 2-1: USB disconnect, device number 3 [ 133.572950][ T5949] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 133.572979][ T5949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.661356][ T5949] vhci_hcd vhci_hcd.0: Device attached [ 133.824272][ T31] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 133.824292][ T31] #PF: supervisor read access in kernel mode [ 133.824302][ T31] #PF: error_code(0x0000) - not-present page [ 133.824313][ T31] PGD 0 P4D 0 [ 133.824330][ T31] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 133.824350][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.824372][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 133.824385][ T31] Workqueue: usb_hub_wq hub_event [ 133.824418][ T31] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 133.824450][ T31] Code: b3 8d 4c 8b b8 b8 02 9e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 0f 22 8e 4d 8b 3f 49 81 ff 00 0f 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 7b fe 07 03 84 c0 74 0e 49 8b 07 49 [ 133.824466][ T31] RSP: 0018:ffffc90000a5f7e8 EFLAGS: 00010207 [ 133.824483][ T31] RAX: 0000000000000000 RBX: ffff88801d2e8000 RCX: 0000000000000000 [ 133.824501][ T31] RDX: 0000000016728b04 RSI: 0000000000000001 RDI: ffffffff8bca6320 [ 133.824515][ T31] RBP: 0000000000100000 R08: ffffffff8b4469a0 R09: 0000000000000000 [ 133.824529][ T31] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002 [ 133.824542][ T31] R13: 0000000000000001 R14: ffff888035853d00 R15: 0000000000000000 [ 133.824555][ T31] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 133.824572][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.824586][ T31] CR2: 0000000000000010 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 133.824605][ T31] Call Trace: [ 133.824613][ T31] [ 133.824623][ T31] hub_event+0x15d/0x4cf0 [ 133.824650][ T31] ? __pfx_NF_HOOK+0x10/0x10 [ 133.824675][ T31] ? __lock_acquire+0x683/0x2ce0 [ 133.824695][ T31] ? register_lock_class+0x31/0x2e0 [ 133.824714][ T31] ? __lock_acquire+0x683/0x2ce0 [ 133.824730][ T31] ? rcu_is_watching+0x15/0xb0 [ 133.824753][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.824790][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.824817][ T31] ? __pfx_hub_event+0x10/0x10 [ 133.824843][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 133.824866][ T31] ? rcu_is_watching+0x15/0xb0 [ 133.824889][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 133.824910][ T31] process_scheduled_works+0xa8e/0x14e0 [ 133.824939][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 133.824963][ T31] ? assign_work+0x3cf/0x5d0 [ 133.824985][ T31] worker_thread+0xa47/0xfb0 [ 133.825014][ T31] kthread+0x388/0x470 [ 133.825040][ T31] ? __pfx_worker_thread+0x10/0x10 [ 133.825058][ T31] ? __pfx_kthread+0x10/0x10 [ 133.825084][ T31] ret_from_fork+0x514/0xb70 [ 133.825113][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 133.825141][ T31] ? __switch_to+0xc89/0x1420 [ 133.825164][ T31] ? __pfx_kthread+0x10/0x10 [ 133.825190][ T31] ret_from_fork_asm+0x1a/0x30 [ 133.825216][ T31] [ 133.825223][ T31] Modules linked in: [ 133.825234][ T31] CR2: 0000000000000010 [ 133.825245][ T31] ---[ end trace 0000000000000000 ]--- [ 133.825255][ T31] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 133.825282][ T31] Code: b3 8d 4c 8b b8 b8 02 9e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 0f 22 8e 4d 8b 3f 49 81 ff 00 0f 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 7b fe 07 03 84 c0 74 0e 49 8b 07 49 [ 133.825297][ T31] RSP: 0018:ffffc90000a5f7e8 EFLAGS: 00010207 [ 133.825311][ T31] RAX: 0000000000000000 RBX: ffff88801d2e8000 RCX: 0000000000000000 [ 133.825323][ T31] RDX: 0000000016728b04 RSI: 0000000000000001 RDI: ffffffff8bca6320 [ 133.825336][ T31] RBP: 0000000000100000 R08: ffffffff8b4469a0 R09: 0000000000000000 [ 133.825347][ T31] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002 [ 133.825358][ T31] R13: 0000000000000001 R14: ffff888035853d00 R15: 0000000000000000 [ 133.825370][ T31] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 133.825386][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.825399][ T31] CR2: 0000000000000010 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 133.825419][ T31] Kernel panic - not syncing: Fatal exception [ 133.825576][ T31] Kernel Offset: disabled