last executing test programs: 1m36.656067593s ago: executing program 4 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1ff}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) 1m35.805826022s ago: executing program 4 (id=9): write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x3a) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1b700000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 1m33.318480857s ago: executing program 4 (id=13): unshare(0x22020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xffffffff) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m32.444783143s ago: executing program 4 (id=15): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1m23.833413017s ago: executing program 4 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x36, 0x15, 0x6, 0x5db14a0, 0x7a8, 0x5}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m22.618434485s ago: executing program 4 (id=34): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8000d8, 0x4dc680) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r4, 0x8, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)=ANY=[@ANYBLOB="b6", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESDEC=r1], 0x1, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8f) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) 1m6.941140496s ago: executing program 32 (id=34): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8000d8, 0x4dc680) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r4, 0x8, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)=ANY=[@ANYBLOB="b6", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESDEC=r1], 0x1, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8f) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) 27.590036897s ago: executing program 3 (id=105): symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 26.848789154s ago: executing program 3 (id=106): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r0, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0x3dc}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f04987972375a102e8d4b062ee0beb0fa90b1abb5f67fa6ca26a9880b7192f96825a883caed920c0c6498944adac8dc337446a3e530a522f8dee3777fc613cac6fd65732f4a3a8f4aa0226a6722f4aa53de83c7ebe61d3b108533abe6168f407180d4a48d42e3de6f7eab792caf42d4c0365b1f45c543537db13cb47aae51d27e486db1a19d7e8a62ad7e721bf375ac2b5bed94923793db0c9daa6c98f016546226876b94788b9f578a8ab0d0ccb8b92d971a0ba7136fcd25631f1633dc1d63de6f2f5e79240e90521c6d", 0x10c}], 0x2) 26.051583063s ago: executing program 3 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b0001006272696467650000"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 25.050915262s ago: executing program 3 (id=111): r0 = openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x41007, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000be5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="6766c7442400f1ffffff6766c7442402f20000006766c744240600000000670f011424676566f30fc7352c000000260f01cbf2f02043000f18640067f4baa00066edf0816eb0fd670f01c2baa000b0a7ee", 0x51}], 0x1, 0x59, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = io_uring_setup(0x1de1, &(0x7f0000000500)={0x0, 0xa23a, 0x8, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r7, 0x19, &(0x7f0000000580)={0x10, 0x9, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 20.977905814s ago: executing program 0 (id=115): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x78, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0x15b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x9e}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 18.246248844s ago: executing program 0 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c000280"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 17.303733488s ago: executing program 0 (id=122): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 16.867179095s ago: executing program 0 (id=123): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0xffff, 0x0, 0x1, 0x101, 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) 15.93452182s ago: executing program 3 (id=124): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8048802) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000440)={r6, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0x23, 0x38, {0x38, 0x0, "170dfe6354add2e48ccf6c91af367ddd267bc49930377b7e2a3ad8594eef4a6749262a3635386b4557909b5be7fee2ba5f849fe5a164"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x30, 0xc7, "cb0428440681138ca83b887070c7bb03a0789f78ee3a3648f6f72d74d1cbc87bb854c43852884f1d759752658fab8271564330bba9489e1890e3cff8f97c38c699c2a66aab44cca6cceb1c426c03500b9322571ee01bb90e7b8dad7e2b37032e05592fff94c95cdd54c2ac8f568e9d23317f3a81ce308e5c064ddcd6bcce8ed2d271f34cc815df128df6ddc45c84fb234655fe32982d3fc0feb2351c1915d408ac86ddc50898a1c12a4686644947f164a6ff9bd5ff89a27fc7055b26bb6fe1961992b461ce7043"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'I'}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "bc6625"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, 'GF'}, &(0x7f0000000800)={0x20, 0x85, 0x3, "09d3cc"}}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=']) 15.820326391s ago: executing program 1 (id=125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15.611666395s ago: executing program 0 (id=126): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0xcd0, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_POLICE={0xc9c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x8, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x6b66, 0x5, 0x60, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x7, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x7, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf5, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0x7, 0x8, 0x5, 0xc6b, 0x6, 0x4, 0x5, 0x3, 0x1, 0x8c15, 0x152a, 0x400, 0x3ff, 0xffff7fff, 0x4, 0x10001, 0x8, 0x1, 0x40800000, 0x4, 0xd129, 0x5ee, 0x1ff, 0x5, 0xffffff00, 0xffffffff, 0x7, 0x7fff, 0x400, 0x1, 0x9, 0x100, 0xff, 0x2, 0x80000000, 0x8, 0x2, 0x10000, 0xf6be, 0x5c0, 0x1ff, 0x8, 0xffffffff, 0x6, 0xdc, 0x8, 0x0, 0x7, 0x1, 0x400, 0x3, 0x6, 0x9, 0x8, 0x0, 0x6, 0x40000, 0x9, 0x8, 0x9, 0x6, 0x3, 0x7fffffff, 0x1, 0x9, 0x9, 0xffffffff, 0x10001, 0x30, 0x40, 0x0, 0x4, 0x1, 0x0, 0xf6d1, 0x6, 0x10001, 0x1, 0x400, 0x33a, 0xf70, 0x40, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, 0x24, 0x2, 0x9, 0x4, 0x1, 0x6, 0x4, 0x0, 0x10, 0x71a1, 0x7fff, 0x8, 0x6, 0xb0, 0x100, 0x101, 0x4, 0x3c, 0xc, 0xb35f, 0x2, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x7, 0x7, 0x8, 0x1, 0x9, 0x8, 0x1, 0x7, 0x5, 0x7, 0x56, 0x7f, 0x8, 0x36c, 0x0, 0xf9, 0x2, 0x4, 0xffff, 0x6, 0x4, 0xfffff000, 0x10001, 0x9, 0xa2, 0x80000000, 0x4, 0x1, 0xd0e, 0x9, 0x9, 0x3, 0x0, 0x9, 0x3, 0x8, 0x2, 0x3, 0x3, 0xfff, 0x0, 0x4, 0x7, 0x8, 0x7, 0x1000, 0x5000000, 0x8, 0x7, 0x101, 0x9, 0x9, 0x0, 0x8, 0x9, 0xb, 0x0, 0xc5, 0x1, 0x8, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0xc, 0x4, 0x5, 0x3, 0x0, 0x7, 0x2, 0x2400, 0xc, 0x8, 0x4, 0x4, 0x200, 0x1, 0x4255, 0x10001, 0xfde, 0x4, 0x6, 0x4, 0x100000, 0x0, 0x2caf, 0x2, 0x3, 0x0, 0xc8c, 0x7b50, 0x9, 0x7ff, 0x3ff, 0xfffffffe, 0x7, 0x40, 0x4, 0xcb5, 0x2, 0x20000, 0x6, 0x7, 0x9d6, 0xa, 0x2, 0x76162fc3, 0x9, 0x1, 0x0, 0x0, 0x8, 0xea, 0x81, 0x4, 0x100000, 0x8, 0x0, 0x7fb, 0x0, 0x2, 0x1c, 0x400, 0xf, 0x6d5, 0xffffffff, 0x80, 0x7fffffff, 0x0, 0x9, 0x1000, 0x10000, 0x3, 0x0, 0x6, 0x7, 0x31954adf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0xe9, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x202, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x0, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x3, 0xa, 0x7, {0x5, 0x0, 0x5, 0x3, 0x2, 0x7}, {0x40, 0x0, 0xb, 0x882e, 0x3, 0x3}, 0x0, 0x5204, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fcntl$notify(r10, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 15.460841716s ago: executing program 2 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) 15.281970129s ago: executing program 1 (id=129): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000a40)=0x10001, 0x4) 14.577192352s ago: executing program 2 (id=131): r0 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x722, 0xfdef) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c) io_uring_enter(r0, 0x27e2, 0x0, 0x7, 0x0, 0x0) 13.799669226s ago: executing program 2 (id=133): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 13.083533789s ago: executing program 2 (id=135): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='>', 0x1}], 0x1}}], 0x2, 0x40c4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 11.737814772s ago: executing program 3 (id=136): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 6.914605542s ago: executing program 5 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) 6.184679243s ago: executing program 5 (id=142): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) 5.874219012s ago: executing program 1 (id=143): r0 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x722, 0xfdef) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c) io_uring_enter(r0, 0x27e2, 0x0, 0x7, 0x0, 0x0) 5.440458349s ago: executing program 5 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c000280"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 5.128175765s ago: executing program 1 (id=145): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.998693445s ago: executing program 0 (id=146): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8048802) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000440)={r6, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0x23, 0x38, {0x38, 0x0, "170dfe6354add2e48ccf6c91af367ddd267bc49930377b7e2a3ad8594eef4a6749262a3635386b4557909b5be7fee2ba5f849fe5a164"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x30, 0xc7, "cb0428440681138ca83b887070c7bb03a0789f78ee3a3648f6f72d74d1cbc87bb854c43852884f1d759752658fab8271564330bba9489e1890e3cff8f97c38c699c2a66aab44cca6cceb1c426c03500b9322571ee01bb90e7b8dad7e2b37032e05592fff94c95cdd54c2ac8f568e9d23317f3a81ce308e5c064ddcd6bcce8ed2d271f34cc815df128df6ddc45c84fb234655fe32982d3fc0feb2351c1915d408ac86ddc50898a1c12a4686644947f164a6ff9bd5ff89a27fc7055b26bb6fe1961992b461ce7043"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'I'}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "bc6625"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, 'GF'}, &(0x7f0000000800)={0x20, 0x85, 0x3, "09d3cc"}}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=']) 4.385634204s ago: executing program 5 (id=147): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40}}, 0x50) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 3.918223508s ago: executing program 1 (id=148): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x7, 0x2, 0x9, 0x40008, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2}, 0x50) 3.164572099s ago: executing program 1 (id=149): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xabb8) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 2.988754896s ago: executing program 5 (id=150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2.436652994s ago: executing program 2 (id=151): open$dir(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r0}, 0xc) 2.199200148s ago: executing program 5 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) 0s ago: executing program 2 (id=153): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000180)={r1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c0002800800034026000010080002400000000a08000140000000010900"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfb}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) r6 = semget$private(0x0, 0x3, 0x12) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x200001, 0x81, 0x100000}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 155.702093][ T5760] cgroup: Unknown subsys name 'net' [ 155.822923][ T5760] cgroup: Unknown subsys name 'cpuset' [ 155.836383][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.195952][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.177102][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.203775][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.215781][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.227314][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.237974][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.325571][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.333343][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.343818][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.356464][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.369837][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.378958][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.395175][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.408595][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.419341][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.438199][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.520492][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.534080][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.545472][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.565196][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.578017][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.582892][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.625188][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.644934][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.657196][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.668619][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.635407][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 167.029423][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 167.052977][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 167.200289][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 167.364398][ T49] Bluetooth: hci0: command tx timeout [ 167.514556][ T49] Bluetooth: hci1: command tx timeout [ 167.525220][ T49] Bluetooth: hci2: command tx timeout [ 167.555414][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.566396][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.575817][ T5778] bridge_slave_0: entered allmulticast mode [ 167.586214][ T5778] bridge_slave_0: entered promiscuous mode [ 167.611894][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.635130][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.642796][ T5778] bridge_slave_1: entered allmulticast mode [ 167.674489][ T49] Bluetooth: hci3: command tx timeout [ 167.679072][ T5778] bridge_slave_1: entered promiscuous mode [ 167.702419][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 167.756045][ T49] Bluetooth: hci4: command tx timeout [ 168.028041][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.067477][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.190259][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.204625][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.212114][ T5782] bridge_slave_0: entered allmulticast mode [ 168.223677][ T5782] bridge_slave_0: entered promiscuous mode [ 168.281846][ T5778] team0: Port device team_slave_0 added [ 168.290254][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.297941][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.305764][ T5782] bridge_slave_1: entered allmulticast mode [ 168.314042][ T5782] bridge_slave_1: entered promiscuous mode [ 168.398546][ T5778] team0: Port device team_slave_1 added [ 168.449759][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.457682][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.465271][ T5783] bridge_slave_0: entered allmulticast mode [ 168.473452][ T5783] bridge_slave_0: entered promiscuous mode [ 168.552107][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.559913][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.568465][ T5789] bridge_slave_0: entered allmulticast mode [ 168.577271][ T5789] bridge_slave_0: entered promiscuous mode [ 168.588279][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.595721][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.603109][ T5783] bridge_slave_1: entered allmulticast mode [ 168.611942][ T5783] bridge_slave_1: entered promiscuous mode [ 168.621715][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.629829][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.637549][ T5792] bridge_slave_0: entered allmulticast mode [ 168.646196][ T5792] bridge_slave_0: entered promiscuous mode [ 168.691923][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.710469][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.718339][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.726115][ T5789] bridge_slave_1: entered allmulticast mode [ 168.734131][ T5789] bridge_slave_1: entered promiscuous mode [ 168.766870][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.774666][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.782123][ T5792] bridge_slave_1: entered allmulticast mode [ 168.790943][ T5792] bridge_slave_1: entered promiscuous mode [ 168.802695][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.810275][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.836626][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.855410][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.934793][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.941876][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.972109][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.095784][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.169477][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.186984][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.206612][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.245202][ T5782] team0: Port device team_slave_0 added [ 169.258817][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.302513][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.341542][ T5782] team0: Port device team_slave_1 added [ 169.430071][ T5778] hsr_slave_0: entered promiscuous mode [ 169.438647][ T5778] hsr_slave_1: entered promiscuous mode [ 169.444402][ T49] Bluetooth: hci0: command tx timeout [ 169.501967][ T5783] team0: Port device team_slave_0 added [ 169.540635][ T5792] team0: Port device team_slave_0 added [ 169.577501][ T5789] team0: Port device team_slave_0 added [ 169.591350][ T5783] team0: Port device team_slave_1 added [ 169.597398][ T49] Bluetooth: hci2: command tx timeout [ 169.597929][ T5780] Bluetooth: hci1: command tx timeout [ 169.659475][ T5792] team0: Port device team_slave_1 added [ 169.688529][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.695812][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.722072][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.741626][ T5789] team0: Port device team_slave_1 added [ 169.755005][ T5780] Bluetooth: hci3: command tx timeout [ 169.779948][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.787398][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.814115][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.834448][ T5780] Bluetooth: hci4: command tx timeout [ 169.854482][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.861573][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.887809][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.960359][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.967584][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.994292][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.008233][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.016002][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.042559][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.136316][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.143372][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.170158][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.203377][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.210730][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.238158][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.335595][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.342637][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.369301][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.531997][ T5783] hsr_slave_0: entered promiscuous mode [ 170.541728][ T5783] hsr_slave_1: entered promiscuous mode [ 170.550049][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 170.556054][ T5783] Cannot create hsr debugfs directory [ 170.597415][ T5782] hsr_slave_0: entered promiscuous mode [ 170.606268][ T5782] hsr_slave_1: entered promiscuous mode [ 170.613685][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 170.619668][ T5782] Cannot create hsr debugfs directory [ 170.783225][ T5792] hsr_slave_0: entered promiscuous mode [ 170.791831][ T5792] hsr_slave_1: entered promiscuous mode [ 170.799863][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 170.805826][ T5792] Cannot create hsr debugfs directory [ 170.855908][ T5789] hsr_slave_0: entered promiscuous mode [ 170.864453][ T5789] hsr_slave_1: entered promiscuous mode [ 170.872366][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 170.878519][ T5789] Cannot create hsr debugfs directory [ 171.514529][ T5780] Bluetooth: hci0: command tx timeout [ 171.524106][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.595329][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.674707][ T5780] Bluetooth: hci1: command tx timeout [ 171.684427][ T5780] Bluetooth: hci2: command tx timeout [ 171.691663][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.772790][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.834463][ T5780] Bluetooth: hci3: command tx timeout [ 171.915580][ T5780] Bluetooth: hci4: command tx timeout [ 172.084959][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.115933][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.140688][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.160951][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.376167][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.405662][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.425808][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.445525][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.718199][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.762436][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.783232][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.814026][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.843565][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.002237][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.033198][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.040729][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.141726][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.161292][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.191599][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.198977][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.239461][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.281845][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.423737][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.538074][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.602292][ T5780] Bluetooth: hci0: command tx timeout [ 173.625632][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.632921][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.654133][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.661568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.755108][ T5780] Bluetooth: hci2: command tx timeout [ 173.760716][ T5780] Bluetooth: hci1: command tx timeout [ 173.914436][ T5780] Bluetooth: hci3: command tx timeout [ 173.948223][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.000951][ T5780] Bluetooth: hci4: command tx timeout [ 174.221199][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.303296][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.310851][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.411570][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.437078][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.444600][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.625349][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.724106][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.731641][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.771394][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.816116][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.882961][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.890529][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.261230][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.417417][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.425075][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.546705][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.554298][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.598557][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.311941][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.348796][ T5778] veth0_vlan: entered promiscuous mode [ 176.453215][ T5783] veth0_vlan: entered promiscuous mode [ 176.532500][ T5778] veth1_vlan: entered promiscuous mode [ 176.604121][ T5783] veth1_vlan: entered promiscuous mode [ 176.782599][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.963561][ T5778] veth0_macvtap: entered promiscuous mode [ 176.977833][ T5782] veth0_vlan: entered promiscuous mode [ 177.077905][ T5778] veth1_macvtap: entered promiscuous mode [ 177.111636][ T5782] veth1_vlan: entered promiscuous mode [ 177.160057][ T5783] veth0_macvtap: entered promiscuous mode [ 177.213121][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.268601][ T5783] veth1_macvtap: entered promiscuous mode [ 177.302465][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.412732][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.422271][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.474032][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.498475][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.532674][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.563607][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.630486][ T5782] veth0_macvtap: entered promiscuous mode [ 177.650925][ T5792] veth0_vlan: entered promiscuous mode [ 177.726239][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.740621][ T5782] veth1_macvtap: entered promiscuous mode [ 177.860675][ T5792] veth1_vlan: entered promiscuous mode [ 177.966379][ T701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.040080][ T701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.060046][ T701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.125697][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.143816][ T701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.287152][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.339631][ T5789] veth0_vlan: entered promiscuous mode [ 178.438221][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.469180][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.528480][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.613552][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.654545][ T5789] veth1_vlan: entered promiscuous mode [ 178.682237][ T5792] veth0_macvtap: entered promiscuous mode [ 178.773953][ T5792] veth1_macvtap: entered promiscuous mode [ 178.998622][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.183308][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.323738][ T5789] veth0_macvtap: entered promiscuous mode [ 179.386592][ T701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.445639][ T701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.468525][ T701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.499043][ T5789] veth1_macvtap: entered promiscuous mode [ 179.530454][ T701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.718275][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.822580][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.975949][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.000741][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.057632][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.084503][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.141785][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.179072][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.369511][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.393558][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.846737][ T5778] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.388425][ T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.436769][ T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.762963][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.813952][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.028050][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.081338][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.299217][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.334881][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.818724][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.023387][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 185.057012][ T5857] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 185.112713][ T5857] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 185.156004][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.197085][ T5857] usb 1-1: Product: syz [ 185.201476][ T5857] usb 1-1: Manufacturer: syz [ 185.229482][ T5857] usb 1-1: SerialNumber: syz [ 185.299188][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 185.301320][ T5857] snd-ua101 1-1:1.1: invalid format type [ 185.353181][ T5857] snd-ua101 1-1:1.0: invalid num_altsetting [ 185.409882][ T5971] bond1: down delay (511) is not a multiple of miimon (8), value rounded to 504 ms [ 185.422058][ T5971] bond1: entered promiscuous mode [ 185.433645][ T5971] bond1: entered allmulticast mode [ 185.449666][ T5971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.572910][ T5857] usb 1-1: USB disconnect, device number 2 [ 185.614473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.667750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.882126][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.917209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.304971][ T5983] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 187.027659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.040897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 187.436807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 188.236032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 188.496525][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.559145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 188.568734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 188.617622][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.668935][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 188.810525][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.847908][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.900841][ T5857] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 188.932125][ T5857] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 188.967891][ T5857] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 189.086186][ T5857] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 189.115181][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.144481][ T5857] usb 4-1: Product: syz [ 189.159814][ T5857] usb 4-1: Manufacturer: syz [ 189.178948][ T5857] usb 4-1: SerialNumber: syz [ 189.207091][ T5857] usb 4-1: config 0 descriptor?? [ 189.215544][ T5993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.223506][ T5993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.235219][ T6000] loop5: detected capacity change from 0 to 7 [ 189.302209][ T5857] usb 4-1: ucan: probing device on interface #0 [ 189.312163][ T5949] Dev loop5: unable to read RDB block 7 [ 189.351637][ T5949] loop5: unable to read partition table [ 189.397541][ T5949] loop5: partition table beyond EOD, truncated [ 189.425016][ T6000] Dev loop5: unable to read RDB block 7 [ 189.459225][ T6000] loop5: unable to read partition table [ 189.507346][ T5857] usb 4-1: ucan: device protocol version 8716288 is not supported [ 189.534499][ T5857] usb 4-1: ucan: probe failed; try to update the device firmware [ 189.559586][ T6000] loop5: partition table beyond EOD, truncated [ 189.589424][ T6000] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.730079][ T5857] usb 4-1: USB disconnect, device number 2 [ 191.182973][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.375017][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 191.407612][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 191.444581][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.498832][ T10] usb 2-1: config 0 has no interface number 0 [ 191.528424][ T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 191.571482][ T10] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.609594][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 191.665709][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 191.680122][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.711410][ T10] usb 2-1: Product: syz [ 191.741655][ T10] usb 2-1: Manufacturer: syz [ 191.762021][ T10] usb 2-1: SerialNumber: syz [ 191.782654][ T10] usb 2-1: config 0 descriptor?? [ 191.786256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.801841][ T6017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.173427][ T10] ipheth 2-1:0.196: Unable to find endpoints [ 192.252257][ T10] usb 2-1: USB disconnect, device number 2 [ 192.800945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 192.820680][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 193.149223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.476561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 193.515624][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.726586][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.764414][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.846262][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.896962][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.977988][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.046395][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.116954][ T9] usb 3-1: Product: syz [ 194.163896][ T9] usb 3-1: Manufacturer: syz [ 194.288862][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 194.366585][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 194.372150][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 194.660269][ T9] usb 3-1: USB disconnect, device number 2 [ 195.073649][ T6039] syzkaller0: entered promiscuous mode [ 195.105004][ T6039] syzkaller0: entered allmulticast mode [ 197.238294][ T5780] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 198.131945][ T6046] syzkaller0: entered promiscuous mode [ 198.159292][ T6046] syzkaller0: entered allmulticast mode [ 199.252521][ T6054] tipc: Started in network mode [ 199.281409][ T6054] tipc: Node identity c67a4bd8657a, cluster identity 4711 [ 199.331227][ T6054] tipc: Enabled bearer , priority 0 [ 199.375376][ T6056] syzkaller0: entered promiscuous mode [ 199.406615][ T6056] syzkaller0: entered allmulticast mode [ 199.582290][ T6054] tipc: Resetting bearer [ 199.716981][ T6053] tipc: Resetting bearer [ 199.910430][ T6053] tipc: Disabling bearer [ 200.424838][ T6067] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 201.731240][ T6071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.745066][ T6071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.025140][ T6071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.169303][ T6071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.169477][ T6071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.250924][ T6071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.312960][ T6071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.313339][ T6071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.347161][ T6071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.368837][ T6071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.369104][ T6071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.379059][ T6071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.382218][ T6071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.382480][ T6071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.421786][ T6071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.521276][ T5780] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 202.883456][ T5404] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 203.233798][ T5404] usb 4-1: config 5 has an invalid interface number: 230 but max is 0 [ 203.233884][ T5404] usb 4-1: config 5 has no interface number 0 [ 203.233952][ T5404] usb 4-1: config 5 interface 230 has no altsetting 0 [ 203.244871][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.266200][ T5404] usb 4-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=e0.9e [ 203.266410][ T5404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.266496][ T5404] usb 4-1: Product: syz [ 203.266557][ T5404] usb 4-1: Manufacturer: syz [ 203.266615][ T5404] usb 4-1: SerialNumber: syz [ 203.877030][ T5404] usb 4-1: USB disconnect, device number 3 [ 203.949612][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.949846][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.234993][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.314533][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.394519][ T5780] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.394640][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.274587][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.384355][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.406769][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.486003][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.486118][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.356577][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.217734][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.399582][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.452969][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 208.475533][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.492353][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.535241][ T10] usb 2-1: Product: syz [ 208.539683][ T10] usb 2-1: Manufacturer: syz [ 208.545211][ T10] usb 2-1: SerialNumber: syz [ 208.554470][ T5780] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.554605][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.564891][ T10] usb 2-1: config 0 descriptor?? [ 208.623684][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 208.664628][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 208.879923][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 208.898899][ T49] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 208.948007][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.014826][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 209.059892][ T10] usb 2-1: media controller created [ 209.258933][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.747985][ T6118] i2c i2c-1: Invalid block size returned: 108 [ 212.046214][ T10] DVB: Unable to find symbol dib7000p_attach() [ 212.073526][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 212.634818][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 212.646982][ T10] Registered IR keymap rc-empty [ 212.653000][ T10] dvb-usb: could not initialize remote control. [ 212.740702][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 212.835617][ T10] usb 2-1: USB disconnect, device number 3 [ 213.493324][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 213.996763][ T6139] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 218.274820][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.286462][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.303588][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.329575][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.347528][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.074791][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.298096][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 220.341626][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.364359][ T10] usb 1-1: Product: syz [ 220.368691][ T10] usb 1-1: Manufacturer: syz [ 220.409593][ T5780] Bluetooth: hci5: command tx timeout [ 220.432066][ T10] usb 1-1: SerialNumber: syz [ 220.759908][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 220.951479][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.965144][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 221.007960][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 221.562457][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.234118][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.383176][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 222.396264][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 222.418813][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.442244][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 222.477608][ T5780] Bluetooth: hci5: command tx timeout [ 222.519214][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 223.143745][ T12] bridge_slave_1: left allmulticast mode [ 223.194745][ T12] bridge_slave_1: left promiscuous mode [ 223.263162][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.321510][ T12] bridge_slave_0: left allmulticast mode [ 223.356461][ T12] bridge_slave_0: left promiscuous mode [ 223.389002][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.820166][ T10] usb 1-1: USB disconnect, device number 3 [ 224.556269][ T5780] Bluetooth: hci5: command tx timeout [ 224.884511][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.999059][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.030689][ T12] bond0 (unregistering): Released all slaves [ 225.061076][ T12] bond1 (unregistering): Released all slaves [ 225.115349][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.374582][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 225.399074][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.430918][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.463537][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.553193][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.603356][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.651034][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.661895][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.670772][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.712841][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.727606][ T6155] bridge_slave_0: entered allmulticast mode [ 225.754551][ T10] usb 1-1: Manufacturer: syz [ 225.754885][ T6155] bridge_slave_0: entered promiscuous mode [ 225.813881][ T10] usb 1-1: config 0 descriptor?? [ 225.931397][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.977706][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.998061][ T6155] bridge_slave_1: entered allmulticast mode [ 226.032920][ T6155] bridge_slave_1: entered promiscuous mode [ 226.317268][ T12] hsr_slave_0: left promiscuous mode [ 226.415413][ T10] rc_core: IR keymap rc-hauppauge not found [ 226.415437][ T12] hsr_slave_1: left promiscuous mode [ 226.418931][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.421456][ T10] Registered IR keymap rc-empty [ 226.422072][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.530250][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.565394][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.586801][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.607316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.622313][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 226.638640][ T5780] Bluetooth: hci5: command tx timeout [ 226.651514][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 226.679851][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.787652][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.829841][ T12] veth1_macvtap: left promiscuous mode [ 226.855513][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.899312][ T12] veth0_macvtap: left promiscuous mode [ 226.918532][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.932740][ T12] veth1_vlan: left promiscuous mode [ 226.966020][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.010270][ T12] veth0_vlan: left promiscuous mode [ 227.024915][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.065061][ T6215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.097439][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.124671][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.184744][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.285407][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.335839][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 227.384783][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.484886][ T10] usb 1-1: USB disconnect, device number 4 [ 227.566537][ T5857] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 227.908998][ T5857] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 227.947557][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.010319][ T5857] usb 4-1: config 0 has no interfaces? [ 228.038504][ T5857] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 228.084380][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.175894][ T5857] usb 4-1: config 0 descriptor?? [ 229.920766][ T12] team0 (unregistering): Port device team_slave_1 removed [ 230.058447][ T12] team0 (unregistering): Port device team_slave_0 removed [ 230.145759][ T6224] process 'syz.0.89' launched './file0' with NULL argv: empty string added [ 231.393031][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.735527][ T6225] geneve2: entered promiscuous mode [ 231.740979][ T6225] geneve2: entered allmulticast mode [ 232.340699][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.201524][ T6155] team0: Port device team_slave_0 added [ 233.374981][ T6155] team0: Port device team_slave_1 added [ 233.715301][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.774426][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.920308][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.124412][ T5780] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 235.246455][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.354642][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.544429][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.721474][ T6155] hsr_slave_0: entered promiscuous mode [ 236.901382][ T6155] hsr_slave_1: entered promiscuous mode [ 237.308754][ T9] usb 4-1: USB disconnect, device number 4 [ 239.194815][ T5780] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 239.203384][ T5780] Bluetooth: hci3: Injecting HCI hardware error event [ 239.211524][ T5780] Bluetooth: hci3: hardware error 0x00 [ 240.016645][ T6264] netdevsim netdevsim3: Direct firmware load for . [ 240.016645][ T6264] failed with error -2 [ 240.044635][ T6264] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 240.044635][ T6264] [ 241.284904][ T5780] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 241.432455][ T6155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.578880][ T6155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.732253][ T6155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.803815][ T6155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.974565][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 242.214368][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 242.259253][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 242.303879][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.388060][ T9] usb 2-1: config 0 descriptor?? [ 242.723028][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 242.828997][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.923485][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 243.020416][ T9] usb 2-1: media controller created [ 243.264563][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.865363][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.122113][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.220978][ T6270] cifs: Unknown parameter 'fd' [ 244.233536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.241145][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.251936][ T9] stb0899_attach: Driver disabled by Kconfig [ 244.272451][ T9] az6027: no front-end attached [ 244.272451][ T9] [ 244.345607][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 244.372283][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 244.453486][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.460944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.523300][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 244.605438][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 246.045276][ T5857] usb 2-1: USB disconnect, device number 4 [ 246.559560][ T5857] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 247.108095][ T6304] syz.2.100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 247.239391][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 247.468802][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 247.513339][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.519263][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.570305][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.613410][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.641204][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.653853][ T24] usb 2-1: Product: syz [ 247.660644][ T24] usb 2-1: Manufacturer: syz [ 247.666411][ T24] usb 2-1: SerialNumber: syz [ 247.897761][ T24] usb 2-1: 0:2 : does not exist [ 247.949962][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 248.294665][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 248.407995][ T24] usb 2-1: USB disconnect, device number 5 [ 248.524668][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 248.539066][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 248.589388][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.641325][ T9] usb 4-1: config 0 has no interface number 0 [ 248.680960][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 248.741718][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.824458][ T9] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.894529][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 248.972515][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 249.056832][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.126803][ T9] usb 4-1: Product: syz [ 249.131164][ T9] usb 4-1: Manufacturer: syz [ 249.212576][ T9] usb 4-1: SerialNumber: syz [ 249.237103][ T9] usb 4-1: config 0 descriptor?? [ 249.256375][ T6320] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.556160][ T9] ipheth 4-1:0.196: Unable to find endpoints [ 249.661664][ T9] usb 4-1: USB disconnect, device number 5 [ 251.013203][ T6155] veth0_vlan: entered promiscuous mode [ 251.042460][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 251.244054][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.279935][ T6155] veth1_vlan: entered promiscuous mode [ 251.295818][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.371003][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 251.408915][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.480693][ T9] usb 4-1: config 0 descriptor?? [ 251.733305][ T6155] veth0_macvtap: entered promiscuous mode [ 251.926541][ T6155] veth1_macvtap: entered promiscuous mode [ 252.326217][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.528151][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.772644][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.814111][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.981726][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.030946][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.227538][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 253.273436][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 253.368318][ T9] usb 4-1: USB disconnect, device number 6 [ 255.807637][ T6368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.107'. [ 257.027841][ T6385] mmap: syz.3.111 (6385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.063212][ T5833] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 257.294555][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 257.308136][ T5833] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 257.344515][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.416613][ T5833] usb 1-1: config 0 descriptor?? [ 257.671351][ T5833] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 257.809467][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.863843][ T5833] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 257.896019][ T5833] usb 1-1: media controller created [ 258.123366][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.964473][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.124870][ T5833] stb0899_attach: Driver disabled by Kconfig [ 259.126261][ T6382] cifs: Unknown parameter 'fd' [ 259.130991][ T5833] az6027: no front-end attached [ 259.130991][ T5833] [ 259.146149][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 259.203869][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 259.240525][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.278425][ T5833] az6027: usb out operation failed. (-71) [ 259.292896][ T9] usb 3-1: config 0 has no interface number 0 [ 259.314057][ T5833] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 259.341475][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 259.378873][ T9] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.395600][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 259.434489][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 259.464881][ T5833] dvb-usb: schedule remote query interval to 400 msecs. [ 259.495534][ T5833] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 259.509671][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 259.578865][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.605059][ T5833] usb 1-1: USB disconnect, device number 5 [ 259.628866][ T9] usb 3-1: Product: syz [ 259.644510][ T9] usb 3-1: Manufacturer: syz [ 259.649307][ T9] usb 3-1: SerialNumber: syz [ 259.709721][ T9] usb 3-1: config 0 descriptor?? [ 259.808593][ T6399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 260.127107][ T9] ipheth 3-1:0.196: Unable to find endpoints [ 260.243570][ T9] usb 3-1: USB disconnect, device number 3 [ 260.369067][ T5833] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 261.146923][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 261.374850][ T9] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 261.430296][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 261.502901][ T9] usb 1-1: string descriptor 0 read error: -22 [ 261.541434][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 261.576696][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.642814][ T6414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.978839][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.029771][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.258358][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.467352][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.498615][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.504582][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.534405][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.544013][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.577174][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.650892][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.688742][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.728981][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.779382][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 262.854747][ T9] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 263.078363][ T9] logitech 0003:046D:C298.0001: hidraw0: USB HID vff.7f Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 263.144362][ T9] logitech 0003:046D:C298.0001: no inputs found [ 263.217052][ T9] usb 1-1: USB disconnect, device number 6 [ 263.641271][ T6439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'. [ 263.881639][ T24] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 264.067410][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 264.095234][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.101560][ T6433] fido_id[6433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 264.151602][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 264.246226][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.301651][ T24] usb 6-1: config 0 descriptor?? [ 264.612325][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 264.798160][ T6438] iowarrior 6-1:0.0: Error -90 while submitting URB [ 264.825604][ T6443] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.969800][ T24] usb 6-1: USB disconnect, device number 2 [ 265.396995][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.403640][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.044415][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 266.234872][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 266.275565][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.321296][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.628013][ T24] usb 4-1: config 0 descriptor?? [ 266.886044][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 266.947875][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.029914][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 267.061196][ T24] usb 4-1: media controller created [ 267.417691][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.805058][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.5.132'. [ 268.374915][ T24] stb0899_attach: Driver disabled by Kconfig [ 268.376786][ T6449] cifs: Unknown parameter 'fd' [ 268.402162][ T24] az6027: no front-end attached [ 268.402162][ T24] [ 268.530517][ T24] az6027: usb out operation failed. (-71) [ 268.584461][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 268.598685][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 268.663388][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 268.688450][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 268.786787][ T24] usb 4-1: USB disconnect, device number 7 [ 269.807307][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 270.759500][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 271.344877][ T6499] program syz.5.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.487414][ T6519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.144'. [ 276.984458][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 277.204595][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 277.286585][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.332702][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.413211][ T9] usb 1-1: config 0 descriptor?? [ 277.699195][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 277.776591][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.881110][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.911369][ T9] usb 1-1: media controller created [ 278.193991][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.067391][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 279.284730][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 279.304983][ T9] stb0899_attach: Driver disabled by Kconfig [ 279.311136][ T9] az6027: no front-end attached [ 279.311136][ T9] [ 279.319399][ T6523] cifs: Unknown parameter 'fd' [ 279.387187][ T5857] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 279.427459][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.439292][ T5857] usb 2-1: Product: syz [ 279.444025][ T5857] usb 2-1: Manufacturer: syz [ 279.458743][ T5857] usb 2-1: SerialNumber: syz [ 279.476430][ T9] az6027: usb out operation failed. (-71) [ 279.514084][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 279.979584][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 281.525477][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 281.533901][ T5857] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 281.563509][ T6538] ===================================================== [ 281.570880][ T6538] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 281.578216][ T6538] _copy_to_user+0xcc/0x120 [ 281.582796][ T6538] i2cdev_ioctl_smbus+0x586/0x660 [ 281.588069][ T6538] i2cdev_ioctl+0xa14/0xf40 [ 281.592702][ T6538] __se_sys_ioctl+0x23c/0x400 [ 281.597661][ T6538] __x64_sys_ioctl+0x97/0xe0 [ 281.602340][ T6538] x64_sys_call+0x1975/0x3ea0 [ 281.607228][ T6538] do_syscall_64+0x134/0xf80 [ 281.611916][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.617986][ T6538] [ 281.620337][ T6538] Uninit was stored to memory at: [ 281.625673][ T6538] __i2c_smbus_xfer+0x25b3/0x3120 [ 281.630875][ T6538] i2c_smbus_xfer+0x2d8/0x480 [ 281.635904][ T6538] i2cdev_ioctl_smbus+0x4a1/0x660 [ 281.644607][ T6538] i2cdev_ioctl+0xa14/0xf40 [ 281.649264][ T6538] __se_sys_ioctl+0x23c/0x400 [ 281.654116][ T6538] __x64_sys_ioctl+0x97/0xe0 [ 281.660002][ T6538] x64_sys_call+0x1975/0x3ea0 [ 281.664907][ T6538] do_syscall_64+0x134/0xf80 [ 281.669569][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 281.675640][ T6538] [ 281.678027][ T6538] Local variable msgbuf1.i created at: [ 281.683510][ T6538] __i2c_smbus_xfer+0x853/0x3120 [ 281.688756][ T6538] i2c_smbus_xfer+0x2d8/0x480 [ 281.693538][ T6538] [ 281.695976][ T6538] Byte 0 of 1 is uninitialized [ 281.700768][ T6538] Memory access of size 1 starts at ffff888021a03d06 [ 281.707603][ T6538] Data copied to user address 0000200000000240 [ 281.713790][ T6538] [ 281.716416][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 281.725906][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 281.736187][ T6538] ===================================================== [ 281.746390][ T6538] Disabling lock debugging due to kernel taint [ 281.789808][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 281.817923][ T9] usb 1-1: USB disconnect, device number 7 [ 281.934875][ T6538] Kernel panic - not syncing: kmsan.panic set ... [ 281.941469][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.1.149 Tainted: G B syzkaller #0 PREEMPT(full) [ 281.952440][ T6538] Tainted: [B]=BAD_PAGE [ 281.956701][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 281.966895][ T6538] Call Trace: [ 281.970275][ T6538] [ 281.973309][ T6538] __dump_stack+0x26/0x30 [ 281.977809][ T6538] dump_stack_lvl+0x50/0x1c0 [ 281.982565][ T6538] ? dump_stack+0x12/0x25 [ 281.987081][ T6538] dump_stack+0x1e/0x25 [ 281.991407][ T6538] vpanic+0x7b4/0x1430 [ 281.995687][ T6538] panic+0x15d/0x160 [ 281.999811][ T6538] kmsan_report+0x31a/0x320 [ 282.004514][ T6538] ? kmsan_internal_check_memory+0x1e8/0x240 [ 282.010695][ T6538] ? kmsan_copy_to_user+0xef/0x190 [ 282.015996][ T6538] ? _copy_to_user+0xcc/0x120 [ 282.020830][ T6538] ? i2cdev_ioctl_smbus+0x586/0x660 [ 282.026203][ T6538] ? i2cdev_ioctl+0xa14/0xf40 [ 282.031142][ T6538] ? __se_sys_ioctl+0x23c/0x400 [ 282.036167][ T6538] ? __x64_sys_ioctl+0x97/0xe0 [ 282.041102][ T6538] ? x64_sys_call+0x1975/0x3ea0 [ 282.046146][ T6538] ? do_syscall_64+0x134/0xf80 [ 282.051054][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.057285][ T6538] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 282.062745][ T6538] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 282.068178][ T6538] ? __i2c_transfer+0x1179/0x3280 [ 282.073453][ T6538] ? kmsan_get_metadata+0xf1/0x160 [ 282.078752][ T6538] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 282.085275][ T6538] ? kmsan_get_metadata+0xf1/0x160 [ 282.090565][ T6538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.096563][ T6538] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 282.101931][ T6538] ? kmsan_get_metadata+0xf1/0x160 [ 282.107219][ T6538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.113227][ T6538] kmsan_internal_check_memory+0x1e8/0x240 [ 282.119222][ T6538] kmsan_copy_to_user+0xef/0x190 [ 282.124334][ T6538] _copy_to_user+0xcc/0x120 [ 282.128985][ T6538] i2cdev_ioctl_smbus+0x586/0x660 [ 282.134180][ T6538] i2cdev_ioctl+0xa14/0xf40 [ 282.138909][ T6538] ? kmsan_get_shadow_origin_ptr+0x3d/0xb0 [ 282.144916][ T6538] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 282.150071][ T6538] __se_sys_ioctl+0x23c/0x400 [ 282.155113][ T6538] __x64_sys_ioctl+0x97/0xe0 [ 282.159969][ T6538] x64_sys_call+0x1975/0x3ea0 [ 282.164812][ T6538] do_syscall_64+0x134/0xf80 [ 282.169543][ T6538] ? clear_bhb_loop+0x50/0xa0 [ 282.174372][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.180454][ T6538] RIP: 0033:0x7f426ab9c799 [ 282.184988][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.204744][ T6538] RSP: 002b:00007f426bb2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.213362][ T6538] RAX: ffffffffffffffda RBX: 00007f426ae15fa0 RCX: 00007f426ab9c799 [ 282.221440][ T6538] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000007 [ 282.229514][ T6538] RBP: 00007f426ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 282.237598][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.245667][ T6538] R13: 00007f426ae16038 R14: 00007f426ae15fa0 R15: 00007ffceed56398 [ 282.253780][ T6538] [ 282.257184][ T6538] Kernel Offset: disabled [ 282.261569][ T6538] Rebooting in 86400 seconds..