last executing test programs: 23.738253213s ago: executing program 2 (id=8): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x482) syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/75, 0x4b}], 0x1) socket(0x840000000002, 0x3, 0x100) 22.50358193s ago: executing program 1 (id=2): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b02010103200809040000000101200009240100800909000909040100000102200009040101010102200009050109100032000908250102300001000904020000010220000904020101010220"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2695, 0x1, 0x1, 0x0, 0x6}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000001800)={{r2, &(0x7f0000000040)='\\\x00', 0x220200, &(0x7f0000000080)={@_ha_fsid={[0xc, 0x6]}, {0x7, 0xf27, 0x7, 0x9}}, 0xffffff80, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xffff}, 0x7, &(0x7f0000001740)=[{0x2, 0x3ff, &(0x7f00000001c0)='-)\x00', &(0x7f0000000240)="cd6da9be6444ef43df174797e6517c712cd5d2427240123a0d6fa22decc2a48ab40828125830dbdc4c802bce7e3b12deb7d07d97bc70e789fcc6e19b9636822fb03bf6c2768c953dc414f87e7703898591d0b81075dd0d4688c9f901ddf1f574f6edc9201c8851905ac4997975d69e1bdf651b8812ae6d9859d11c32e884b4", 0x7f, 0x12}, {0x1, 0x800, &(0x7f0000000300)='\\\'+*\x00', &(0x7f0000000340), 0x0, 0x2}, {0x2, 0x166, &(0x7f0000000480)='mptcp_pm\x00', &(0x7f00000004c0)="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", 0x1000, 0x30}, {0x951bb3566cdf72f0, 0x437, &(0x7f00000014c0)='{\x00', &(0x7f0000001500), 0x0, 0x8}, {0x1, 0x4, &(0x7f00000015c0)='mptcp_pm\x00', &(0x7f0000001600), 0x0, 0x2}, {0x1, 0x7ff, &(0x7f0000001640)='mptcp_pm\x00', &(0x7f0000001680)="e8cdf4d4", 0x4, 0x30}, {0x0, 0x4, &(0x7f00000016c0)='\x00', &(0x7f0000001700)="ef8469524ce1b1427e50a73323ed8bf9d07360b351c5347d8202cfb294166c7f", 0x20}]}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r8) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x48044) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$nbd(r1, &(0x7f0000000340)={0x67446698, 0x0, 0x1, 0x4, 0x2, "66d181db45ef19788eea425e71807f4772b8272aa25425ee3cd13723764bcb2c84bcd89c86ebdbd58eab0194de405d773ba5d4f407a5b9621273f03bd0d88c"}, 0x4f) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 21.462351462s ago: executing program 4 (id=11): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x1, 0xf, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x32, 0xdff0dd5bd81861f5, 0x0, @in6={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x38}}, 0x4000004) 20.628257642s ago: executing program 2 (id=13): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 20.37263484s ago: executing program 4 (id=14): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38) sendfile(r3, r3, 0x0, 0x1002000ff) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.643392222s ago: executing program 2 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 11.399512067s ago: executing program 4 (id=18): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x70e00000, 0x9, 0x7, 0xf}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000040)=0x7fffffff) 8.638291579s ago: executing program 1 (id=23): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @random="2dc73cc7317a", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8.178406399s ago: executing program 0 (id=24): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x1, 0xf, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x32, 0xdff0dd5bd81861f5, 0x0, @in6={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x38}}, 0x4000004) 7.945669689s ago: executing program 4 (id=25): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000c0000000089338a2aa547230f855f32ddbc2da99ca67a2ddb4d24d388974991e4a9f876d025860e02143b4ccfe2f41931fba164d4c72d1cdf63eeb485499ea00f79ceea1e70f09038fff90e8f665149228477922ed890f2c0c8b5f6b0cb371a385776fbf29bf9eac8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac3(0x2, 0xb0, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x5, 0x80, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x14}, [@power_domain={0xa, 0x24, 0x10, 0x2, 0x0, 0x3, 0x5f, "0e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x1, 0x4, 0x3, "87b0544189a3af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x10, 0x5, {0xa, 0x25, 0x25, 0x1, 0x9, 0xf4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x3, 0x14aa, 0x4, 0x6, 0x3, 0x4, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa0, 0xe, 0x9, {0xa, 0x25, 0x25, 0x3, 0x83, 0x800}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x5, 0xff, 0x8, 0x40, 0x4a}, 0x30, &(0x7f00000002c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c5a90dcdf4510eba477d7633d294df2b"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "abaa9599bc69cfc6c8873a12b53b8abf"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}, {0x4b, &(0x7f0000000400)=@string={0x4b, 0x3, "dcf13fa070ef5d883ce846ac2d014617ef6a38056d1fa5f1118aabc9dd7fd176904ed59f1f664c4563e38a4f664af155dbca34f4e584c9db7375b3ca7301e705d2f3606a6df651d310"}}, {0x0, 0x0}, {0x35, &(0x7f0000000580)=@string={0x35, 0x3, "1d2b1813fa318b0d62750a3a7ffee9ae6b238eb6c6f0f4c93ad0337169aa555073d79cf44d03da7d7b7b3baf7f9f49bf0665f3"}}]}) syz_usb_control_io$uac3(r1, &(0x7f00000006c0)={0xc, &(0x7f0000000600)={0x40, 0x21, 0x64, {0x64, 0x2, "d7ad0f85dbd3e585804f091315acbc91782bb7806e9620c1f1a07de9c01377c2ebf32e041c3a59ebf5fed32b18cbee5b8b205cc6c33b3d19fe0ee629667c343b2bf8de2a203755e02da47286816249e7ef85c722065cec8d181a87c16d06b57c5d53"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)=0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x8, 0xf, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @local, {[@generic={0x89, 0xa, "160f8661d3660263"}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x4, 0x70bdac, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60800}}, 0x20}}, 0x20044000) syz_usb_control_io$uac3(r0, 0x0, 0x0) 7.880998051s ago: executing program 3 (id=26): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x9f1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xfffffff8, 0xfff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x3, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x20008, 0x0, 0x7, 0x0, 0x0, 0x4, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x55], [0x9, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0xfffffff2, 0x0, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x20, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x1fffffc], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x2, 0x0, 0x80000000, 0x4, 0x91a, 0x3, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x3, 0xae, 0x0, 0xc, 0x800, 0x2, 0x0, 0x10200000, 0x3e1, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x1]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d", 0x12) 7.631292769s ago: executing program 2 (id=27): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 7.446458414s ago: executing program 1 (id=28): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 7.26604157s ago: executing program 0 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xec, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0x8001, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.690660233s ago: executing program 3 (id=30): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x3, 0x6}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdb7c, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1f, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0xb}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}, 0x0) 6.312216355s ago: executing program 0 (id=31): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000380)={0x5, 0x4, 0x3000, 0x1000, &(0x7f0000028000/0x1000)=nil, 0x8000000000000000, r3}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000ac0)={0x10, 0x7, 0x2, 0x9, 0x4000005, 0x81, "062100", 0x4, 0x2, 0x6, 0x8, 0x10, 0xc, 0x10}) socket$rds(0x15, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011fffe8000000000000000000000000000aafc0100"/54], 0x36) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000080)={0x0, 0x3, 0x6, &(0x7f0000000000)={0x11, "9124be917ea944c214b5367c2fe313c4c005671fc56af43014ffef1e156e7d73ec"}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000040)={0xe, "810556c721393f4084aa00"}}) 6.181540434s ago: executing program 1 (id=32): clock_gettime(0x3, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r0, r1+10000000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 4.926154304s ago: executing program 2 (id=33): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x7ffe, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) lstat64(0x0, 0x0) 4.92597085s ago: executing program 3 (id=34): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) 4.865552278s ago: executing program 1 (id=35): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.63798141s ago: executing program 4 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.541090526s ago: executing program 3 (id=37): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x304, 0x2a8, 0x2a8, 0x304, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1e4, 0x22c, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0xa, 0x2, 0xffffd5ee, 0x5, 0x1ff, 0xb, 0x9ced44c3ce80de0, 0x18}, {0xaa21}}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x80, 0x8, 0x7, 0x7, 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bind(r6, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff00001002, 0x0, &(0x7f0000000640)={0x0, 0x200, 0x3, 0x7, 0x47d2, 0x0, 0x6, 0x570f}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000002060301000000000000000000000202120003006207746d61703a69702c6d616300000005000400000000000900"], 0x64}}, 0x40000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) pipe2(&(0x7f0000000400), 0x80080) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pread64(r7, 0x0, 0x0, 0xb) 2.132312647s ago: executing program 0 (id=38): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) 1.126463815s ago: executing program 0 (id=39): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x1, 0xf, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x32, 0xdff0dd5bd81861f5, 0x0, @in6={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x38}}, 0x4000004) 1.126246839s ago: executing program 1 (id=40): getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/185, 0xb9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000002c0)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, 0x0, 0x0) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) 950.064292ms ago: executing program 2 (id=41): syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(0x0, 0x84) r1 = open(0x0, 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000053d2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 892.735619ms ago: executing program 4 (id=42): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, 0x0, 0x2000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) 719.899191ms ago: executing program 3 (id=43): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x482) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/75, 0x4b}], 0x1) 443.904852ms ago: executing program 0 (id=44): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x1, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420c00deeeffff0000ff0c70f3"}, 0x14000e, 0x2}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) 0s ago: executing program 3 (id=45): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x3, 0x6}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdb7c, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1f, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0xb}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 190.102533][ T5560] cgroup: Unknown subsys name 'net' [ 190.237835][ T5560] cgroup: Unknown subsys name 'cpuset' [ 190.254121][ T5560] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.735664][ T5560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.637522][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.649613][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.659348][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.673338][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.685748][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.722289][ T4880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.730710][ T4880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.741157][ T4880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.749715][ T4880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.764901][ T4880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.784876][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.792980][ T5591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.804480][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.813415][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.829754][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.830695][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.855827][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.864539][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.872983][ T4880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.885001][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.891855][ T4880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.903132][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.914415][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.924540][ T4880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.936754][ T5587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.757441][ T5584] Bluetooth: hci0: command tx timeout [ 203.999843][ T5584] Bluetooth: hci3: command tx timeout [ 204.005723][ T5588] Bluetooth: hci2: command tx timeout [ 204.006005][ T5587] Bluetooth: hci4: command tx timeout [ 204.014500][ T5584] Bluetooth: hci1: command tx timeout [ 204.180132][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.187463][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.838435][ T5584] Bluetooth: hci0: command tx timeout [ 206.077421][ T5584] Bluetooth: hci4: command tx timeout [ 206.078756][ T5588] Bluetooth: hci3: command tx timeout [ 206.083392][ T5587] Bluetooth: hci1: command tx timeout [ 206.088819][ T5588] Bluetooth: hci2: command tx timeout [ 207.235902][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.244222][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.254279][ T5578] bridge_slave_0: entered allmulticast mode [ 207.266110][ T5578] bridge_slave_0: entered promiscuous mode [ 207.283483][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.291808][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.301320][ T5578] bridge_slave_1: entered allmulticast mode [ 207.312742][ T5578] bridge_slave_1: entered promiscuous mode [ 207.366996][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.388799][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.408731][ T5580] bridge_slave_0: entered allmulticast mode [ 207.430468][ T5580] bridge_slave_0: entered promiscuous mode [ 207.522032][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.530707][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.540249][ T5580] bridge_slave_1: entered allmulticast mode [ 207.551390][ T5580] bridge_slave_1: entered promiscuous mode [ 207.700368][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.851011][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.864337][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.873892][ T5585] bridge_slave_0: entered allmulticast mode [ 207.886931][ T5585] bridge_slave_0: entered promiscuous mode [ 207.907147][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.916990][ T5588] Bluetooth: hci0: command tx timeout [ 207.959224][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.999128][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.007146][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.014916][ T5585] bridge_slave_1: entered allmulticast mode [ 208.025162][ T5585] bridge_slave_1: entered promiscuous mode [ 208.098516][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.109018][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.116540][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.124384][ T5586] bridge_slave_0: entered allmulticast mode [ 208.134013][ T5586] bridge_slave_0: entered promiscuous mode [ 208.157000][ T5588] Bluetooth: hci4: command tx timeout [ 208.162828][ T5584] Bluetooth: hci2: command tx timeout [ 208.168807][ T5587] Bluetooth: hci1: command tx timeout [ 208.174547][ T5579] Bluetooth: hci3: command tx timeout [ 208.227036][ T5578] team0: Port device team_slave_0 added [ 208.261145][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.269273][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.277134][ T5586] bridge_slave_1: entered allmulticast mode [ 208.286114][ T5586] bridge_slave_1: entered promiscuous mode [ 208.326223][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.334495][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.342777][ T5582] bridge_slave_0: entered allmulticast mode [ 208.351515][ T5582] bridge_slave_0: entered promiscuous mode [ 208.372494][ T5578] team0: Port device team_slave_1 added [ 208.443960][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.454220][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.462372][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.470197][ T5582] bridge_slave_1: entered allmulticast mode [ 208.480679][ T5582] bridge_slave_1: entered promiscuous mode [ 208.526505][ T5580] team0: Port device team_slave_0 added [ 208.568958][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.676149][ T5580] team0: Port device team_slave_1 added [ 208.705559][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.772324][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.780059][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.806854][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.855681][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.902456][ T5585] team0: Port device team_slave_0 added [ 208.918183][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.930153][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.937908][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.964473][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.062143][ T5585] team0: Port device team_slave_1 added [ 209.075581][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.092360][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.100201][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.127078][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.147420][ T5586] team0: Port device team_slave_0 added [ 209.215618][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.223017][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.249302][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.269678][ T5586] team0: Port device team_slave_1 added [ 209.406297][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.413982][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.440273][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.460127][ T5582] team0: Port device team_slave_0 added [ 209.529781][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.537700][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.564479][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.584372][ T5582] team0: Port device team_slave_1 added [ 209.605110][ T5578] hsr_slave_0: entered promiscuous mode [ 209.614219][ T5578] hsr_slave_1: entered promiscuous mode [ 209.629436][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.636540][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.663263][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.750683][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.758555][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.785037][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.952991][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.960727][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.987327][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.998617][ T5588] Bluetooth: hci0: command tx timeout [ 210.018628][ T5580] hsr_slave_0: entered promiscuous mode [ 210.028061][ T5580] hsr_slave_1: entered promiscuous mode [ 210.036238][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 210.042347][ T5580] Cannot create hsr debugfs directory [ 210.099236][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.106959][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.133566][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.194555][ T5585] hsr_slave_0: entered promiscuous mode [ 210.203834][ T5585] hsr_slave_1: entered promiscuous mode [ 210.212449][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 210.218471][ T5585] Cannot create hsr debugfs directory [ 210.247162][ T5588] Bluetooth: hci4: command tx timeout [ 210.253041][ T5587] Bluetooth: hci1: command tx timeout [ 210.259000][ T5584] Bluetooth: hci2: command tx timeout [ 210.264754][ T5579] Bluetooth: hci3: command tx timeout [ 210.468626][ T5586] hsr_slave_0: entered promiscuous mode [ 210.480363][ T5586] hsr_slave_1: entered promiscuous mode [ 210.489631][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 210.495568][ T5586] Cannot create hsr debugfs directory [ 210.553263][ T5582] hsr_slave_0: entered promiscuous mode [ 210.562545][ T5582] hsr_slave_1: entered promiscuous mode [ 210.571020][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 210.577108][ T5582] Cannot create hsr debugfs directory [ 211.897712][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.929077][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.945392][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.965443][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.976395][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.000225][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.033203][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.054195][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.169253][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.198372][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.209143][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.230651][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.244350][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.264012][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.274969][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.301584][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.549490][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.571344][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.585689][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.611266][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.622898][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.647836][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.669371][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.694670][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.943341][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.977222][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.992322][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.012746][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.027758][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.053082][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.097716][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.126477][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.409719][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.433388][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.472787][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.494600][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.505911][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.532380][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.545501][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.563532][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.754032][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.916055][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.016266][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.108917][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.188219][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.195847][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.313711][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.321431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.384213][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.410733][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.418308][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.462003][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.469534][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.708731][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.781099][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.869223][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.877001][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.969309][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.977024][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.086367][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.146854][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.224070][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.231781][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.341898][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.349699][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.556221][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.706351][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.714081][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.929898][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.937561][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.034003][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.293889][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.971780][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.196013][ T5580] veth0_vlan: entered promiscuous mode [ 220.361250][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.391617][ T5580] veth1_vlan: entered promiscuous mode [ 220.716352][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.814505][ T5586] veth0_vlan: entered promiscuous mode [ 220.946716][ T5580] veth0_macvtap: entered promiscuous mode [ 221.033366][ T5586] veth1_vlan: entered promiscuous mode [ 221.062744][ T5580] veth1_macvtap: entered promiscuous mode [ 221.076195][ T5582] veth0_vlan: entered promiscuous mode [ 221.244314][ T5582] veth1_vlan: entered promiscuous mode [ 221.296321][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.392331][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.500167][ T5578] veth0_vlan: entered promiscuous mode [ 221.515024][ T5585] veth0_vlan: entered promiscuous mode [ 221.566434][ T1319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.579209][ T1319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.620029][ T1319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.630559][ T1319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.684274][ T5578] veth1_vlan: entered promiscuous mode [ 221.719800][ T5586] veth0_macvtap: entered promiscuous mode [ 221.784467][ T5585] veth1_vlan: entered promiscuous mode [ 221.825753][ T5586] veth1_macvtap: entered promiscuous mode [ 222.009798][ T5582] veth0_macvtap: entered promiscuous mode [ 222.090377][ T5582] veth1_macvtap: entered promiscuous mode [ 222.183828][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.270158][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.362681][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.381369][ T5585] veth0_macvtap: entered promiscuous mode [ 222.483498][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.494825][ T5578] veth0_macvtap: entered promiscuous mode [ 222.520445][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.543808][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.585525][ T5585] veth1_macvtap: entered promiscuous mode [ 222.608788][ T5578] veth1_macvtap: entered promiscuous mode [ 222.623083][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.647642][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.739834][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.752047][ T1007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.805651][ T1007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.822034][ T1007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.071605][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.095184][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.250514][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.316955][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.522752][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.541568][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.570858][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.590790][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.636438][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.687808][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.731420][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.793857][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.711352][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.755914][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.984108][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.024008][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.495106][ T5580] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.873285][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.934863][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.245952][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.284980][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.718427][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.755219][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.789583][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.813309][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.285902][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.305589][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.401665][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.429825][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.497461][ T5850] bridge_slave_0: left allmulticast mode [ 231.505725][ T5850] bridge_slave_0: left promiscuous mode [ 231.525503][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.567608][ T5850] bridge_slave_1: left allmulticast mode [ 231.575042][ T5850] bridge_slave_1: left promiscuous mode [ 231.594789][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.707800][ T5850] bond0: (slave bond_slave_0): Releasing backup interface [ 231.880633][ T5850] bond0: (slave bond_slave_1): Releasing backup interface [ 232.074790][ T5850] team0: Port device team_slave_0 removed [ 232.169887][ T5850] team0: Port device team_slave_1 removed [ 232.190848][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.226352][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.296328][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.344716][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.367990][ T5687] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 232.431437][ T5850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.547891][ T5687] usb 4-1: Using ep0 maxpacket: 16 [ 232.562076][ T5687] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 232.573397][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.608913][ T5687] usb 4-1: config 0 descriptor?? [ 232.681210][ T5687] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 233.136457][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.185988][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.235017][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.269190][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.577648][ T5678] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 233.761545][ T5678] usb 3-1: Using ep0 maxpacket: 8 [ 233.794851][ T5678] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 233.890797][ T5678] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 233.939062][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.976987][ T5678] usb 3-1: Product: syz [ 234.003995][ T5678] usb 3-1: Manufacturer: syz [ 234.038102][ T5678] usb 3-1: SerialNumber: syz [ 234.102416][ T5678] usb 3-1: config 0 descriptor?? [ 234.180881][ T5678] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 234.210727][ T5678] usb 3-1: setting power ON [ 234.251211][ T5678] dvb-usb: bulk message failed: -22 (2/0) [ 234.289393][ T5678] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.363540][ T5678] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 234.424886][ T5861] dvb-usb: bulk message failed: -22 (3/0) [ 234.433610][ T5678] usb 3-1: media controller created [ 234.567949][ T5861] dvb-usb: bulk message failed: -22 (4/0) [ 234.595232][ T5861] cxusb: i2c read failed [ 234.762793][ T5678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.120307][ T5684] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 235.163782][ T5678] usb 3-1: selecting invalid altsetting 6 [ 235.177074][ T5678] usb 3-1: digital interface selection failed (-22) [ 235.202501][ T5678] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 235.221893][ T5854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.233263][ T5854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.273301][ T5678] usb 3-1: setting power OFF [ 235.293791][ T5678] dvb-usb: bulk message failed: -22 (2/0) [ 235.324521][ T5678] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 235.389006][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.403633][ T5678] (NULL device *): no alternate interface [ 235.417956][ T5684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.490160][ T5684] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 235.529931][ T5684] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.566228][ T5687] gspca_sonixj: reg_w1 err -71 [ 235.587419][ T5687] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 235.624250][ T5684] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 235.678124][ T5687] usb 4-1: USB disconnect, device number 2 [ 235.687086][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.725686][ T5684] usb 2-1: Product: syz [ 235.771231][ T5684] usb 2-1: Manufacturer: syz [ 235.807813][ T5684] usb 2-1: SerialNumber: syz [ 236.275038][ T5678] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 236.383565][ T5678] usb 3-1: USB disconnect, device number 2 [ 244.481470][ T5684] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 244.705422][ T5684] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 245.843053][ T5684] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 245.903344][ T5684] usb 2-1: USB disconnect, device number 2 [ 245.947242][ T5678] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.075501][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.170880][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.224236][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.274870][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.331584][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.380122][ T5678] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.461471][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.538543][ T5678] usb 5-1: config 0 descriptor?? [ 247.119979][ T5678] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 247.144269][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 247.246463][ T5916] syz_tun: entered allmulticast mode [ 247.354278][ T5916] dvmrp8: entered allmulticast mode [ 247.407875][ T5678] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 247.553976][ T5678] usb 5-1: USB disconnect, device number 2 [ 247.727515][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.793299][ T5915] syz_tun: left allmulticast mode [ 248.691779][ T5920] fido_id[5920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 249.270222][ T5680] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.485864][ T5680] usb 5-1: Using ep0 maxpacket: 16 [ 249.515996][ T5680] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 249.516168][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.557359][ T5680] usb 5-1: config 0 descriptor?? [ 249.614602][ T5680] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 249.710957][ T29] audit: type=1326 audit(1781367623.275:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.740600][ T29] audit: type=1326 audit(1781367623.315:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.776720][ T29] audit: type=1326 audit(1781367623.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.784658][ T29] audit: type=1326 audit(1781367623.355:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.794195][ T29] audit: type=1326 audit(1781367623.365:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.797471][ T29] audit: type=1326 audit(1781367623.365:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.802557][ T29] audit: type=1326 audit(1781367623.375:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.814197][ T29] audit: type=1326 audit(1781367623.375:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.823145][ T29] audit: type=1326 audit(1781367623.395:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 249.828798][ T29] audit: type=1326 audit(1781367623.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.28" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 250.987458][ T5678] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 251.148260][ T5678] usb 1-1: Using ep0 maxpacket: 32 [ 251.175387][ T5678] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 251.202840][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.257974][ T5678] usb 1-1: config 0 descriptor?? [ 251.582923][ T5678] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 251.606337][ T5678] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.624136][ T5678] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 251.661572][ T5678] usb 1-1: media controller created [ 251.898526][ T5678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.011071][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.056178][ T5943] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 252.097618][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.224104][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.401367][ T5680] gspca_sonixj: reg_w1 err -71 [ 252.413495][ T5680] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 252.455876][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.479419][ T5680] usb 5-1: USB disconnect, device number 3 [ 253.129102][ T5678] az6027: usb out operation failed. (-71) [ 253.140918][ T5678] az6027: usb out operation failed. (-71) [ 253.149225][ T5678] stb0899_attach: Driver disabled by Kconfig [ 253.155605][ T5678] az6027: no front-end attached [ 253.155605][ T5678] [ 253.170265][ T5680] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 253.214871][ T5678] az6027: usb out operation failed. (-71) [ 253.227107][ T5678] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 253.266357][ T5678] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 253.350443][ T5678] dvb-usb: schedule remote query interval to 400 msecs. [ 253.367698][ T5678] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 253.421872][ T5680] usb 2-1: config 0 has no interfaces? [ 253.495084][ T5678] usb 1-1: USB disconnect, device number 2 [ 253.619832][ T5680] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.712208][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 253.762916][ T5680] usb 2-1: Product: syz [ 253.797519][ T5680] usb 2-1: Manufacturer: syz [ 253.846469][ T5680] usb 2-1: SerialNumber: syz [ 253.973809][ T5680] usb 2-1: config 0 descriptor?? [ 254.283496][ T5680] usb 2-1: USB disconnect, device number 3 [ 254.371757][ T5678] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 256.506516][ T5986] ===================================================== [ 256.514225][ T5986] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 [ 256.521891][ T5986] dvb_demux_read+0x580/0xa40 [ 256.527105][ T5986] vfs_readv+0x931/0xf30 [ 256.531632][ T5986] __ia32_compat_sys_preadv+0x2da/0x540 [ 256.537759][ T5986] ia32_sys_call+0x3e87/0x4360 [ 256.542877][ T5986] __do_fast_syscall_32+0x195/0x470 [ 256.552888][ T5986] do_fast_syscall_32+0x37/0x80 [ 256.559837][ T5986] do_SYSENTER_32+0x1f/0x30 [ 256.564683][ T5986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.571527][ T5986] [ 256.574023][ T5986] Uninit was created at: [ 256.578976][ T5986] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 256.585346][ T5986] alloc_pages_mpol+0x328/0x860 [ 256.590729][ T5986] alloc_pages_noprof+0x101/0x290 [ 256.596036][ T5986] __vmalloc_node_range_noprof+0xab0/0x2cd0 [ 256.602467][ T5986] __vmalloc_noprof+0x128/0x1f0 [ 256.607728][ T5986] vmalloc_array_noprof+0x48/0x80 [ 256.613026][ T5986] dvb_dmxdev_init+0xd8/0x680 [ 256.618080][ T5986] vidtv_bridge_probe+0x1bfd/0x2690 [ 256.623547][ T5986] platform_probe+0x213/0x370 [ 256.628642][ T5986] really_probe+0x4d5/0xe40 [ 256.633326][ T5986] __driver_probe_device+0x2fb/0x410 [ 256.640930][ T5986] driver_probe_device+0x70/0x8f0 [ 256.646216][ T5986] __driver_attach+0x541/0xaa0 [ 256.658356][ T5986] bus_for_each_dev+0x33b/0x580 [ 256.663463][ T5986] driver_attach+0x51/0x70 [ 256.669084][ T5986] bus_add_driver+0x54f/0xdb0 [ 256.674120][ T5986] driver_register+0x42e/0x6a0 [ 256.679270][ T5986] __platform_driver_register+0x65/0x80 [ 256.685082][ T5986] vidtv_bridge_init+0x73/0x100 [ 256.690893][ T5986] do_one_initcall+0x237/0xb30 [ 256.695936][ T5986] do_initcall_level+0x157/0x330 [ 256.701530][ T5986] do_initcalls+0x176/0x310 [ 256.706325][ T5986] do_basic_setup+0x22/0x30 [ 256.711300][ T5986] kernel_init_freeable+0x213/0x460 [ 256.717023][ T5986] kernel_init+0x2f/0x5e0 [ 256.721851][ T5986] ret_from_fork+0x20f/0x8d0 [ 256.726921][ T5986] ret_from_fork_asm+0x1a/0x30 [ 256.731958][ T5986] [ 256.734465][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(lazy) [ 256.744007][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.758888][ T5986] ===================================================== [ 256.766004][ T5986] Disabling lock debugging due to kernel taint [ 256.834833][ T5986] Kernel panic - not syncing: kmsan.panic set ... [ 256.841509][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: syz.0.44 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 256.852416][ T5986] Tainted: [B]=BAD_PAGE [ 256.856705][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.867141][ T5986] Call Trace: [ 256.870571][ T5986] [ 256.873615][ T5986] __dump_stack+0x26/0x30 [ 256.878168][ T5986] dump_stack_lvl+0x50/0x1c0 [ 256.882955][ T5986] ? dump_stack+0x12/0x25 [ 256.887566][ T5986] dump_stack+0x1e/0x25 [ 256.891942][ T5986] vpanic+0x7b4/0x1430 [ 256.896258][ T5986] panic+0x15d/0x160 [ 256.900431][ T5986] kmsan_report+0x31a/0x320 [ 256.905203][ T5986] ? __msan_warning+0x1b/0x30 [ 256.910119][ T5986] ? dvb_demux_read+0x580/0xa40 [ 256.915162][ T5986] ? vfs_readv+0x931/0xf30 [ 256.919772][ T5986] ? __ia32_compat_sys_preadv+0x2da/0x540 [ 256.925731][ T5986] ? ia32_sys_call+0x3e87/0x4360 [ 256.930903][ T5986] ? __do_fast_syscall_32+0x195/0x470 [ 256.936471][ T5986] ? do_fast_syscall_32+0x37/0x80 [ 256.941713][ T5986] ? do_SYSENTER_32+0x1f/0x30 [ 256.946578][ T5986] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.953339][ T5986] ? __rcu_read_unlock+0x6c/0xd0 [ 256.958505][ T5986] ? aa_file_perm+0x4b9/0x2870 [ 256.963557][ T5986] ? aa_file_perm+0x4f0/0x2870 [ 256.968585][ T5986] ? stack_depot_save_flags+0x35/0x790 [ 256.974452][ T5986] ? kmsan_get_metadata+0xf1/0x160 [ 256.979822][ T5986] ? kmsan_get_metadata+0xf1/0x160 [ 256.985171][ T5986] ? kmsan_get_metadata+0xf1/0x160 [ 256.990521][ T5986] ? kmsan_get_metadata+0xf1/0x160 [ 256.995864][ T5986] ? kmsan_get_metadata+0x146/0x160 [ 257.001296][ T5986] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 257.007866][ T5986] ? __pfx_dvb_demux_read+0x10/0x10 [ 257.013267][ T5986] ? kmsan_get_metadata+0x146/0x160 [ 257.018720][ T5986] __msan_warning+0x1b/0x30 [ 257.023618][ T5986] dvb_demux_read+0x580/0xa40 [ 257.028521][ T5986] ? __pfx_dvb_demux_read+0x10/0x10 [ 257.033918][ T5986] vfs_readv+0x931/0xf30 [ 257.038399][ T5986] ? kmsan_get_metadata+0xf1/0x160 [ 257.043756][ T5986] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 257.049814][ T5986] __ia32_compat_sys_preadv+0x2da/0x540 [ 257.055643][ T5986] ia32_sys_call+0x3e87/0x4360 [ 257.060782][ T5986] __do_fast_syscall_32+0x195/0x470 [ 257.066224][ T5986] do_fast_syscall_32+0x37/0x80 [ 257.071290][ T5986] do_SYSENTER_32+0x1f/0x30 [ 257.076002][ T5986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.082606][ T5986] RIP: 0023:0xf6fef01c [ 257.086919][ T5986] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 257.106754][ T5986] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 257.115425][ T5986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 257.123654][ T5986] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000000d [ 257.132289][ T5986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.140432][ T5986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.148577][ T5986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.156799][ T5986] [ 257.160609][ T5986] Kernel Offset: disabled [ 257.165203][ T5986] Rebooting in 86400 seconds..