last executing test programs: 16.705117616s ago: executing program 3 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 15.971892766s ago: executing program 3 (id=204): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x134, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) 15.327051006s ago: executing program 3 (id=206): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) syz_open_procfs(0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 13.856078777s ago: executing program 3 (id=211): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) 13.040304544s ago: executing program 3 (id=214): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x18100, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x400000000001, 0x100) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0x0, 0x7, 0x4, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/arp\x00') r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfacd05679e69b95}], 0x1, 0x30040803) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x9, 0xf7fffffc, 0x8000, 0x4564}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0x14, 0x400, 0x70bd28, 0x1, {0x86}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x0, {0xe7ff, 0x1, 0xfff, 0x870}}) 8.758065859s ago: executing program 4 (id=231): inotify_init() socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x3c65, &(0x7f0000000180)={0x0, 0x44c6, 0x10000, 0x2, 0x31f}, &(0x7f0000000000), &(0x7f00000003c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_matches\x00') read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020) pread64(r0, &(0x7f0000005e80)=""/32, 0x20, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) socket$inet_sctp(0x2, 0x1, 0x84) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x12}}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x2, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x7}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0x2, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x3, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x1, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d7, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x2, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x8, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0x1}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xf3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x9, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0xfffe, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x0, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x5, 0x8, 0x4, 0xffffffff, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0x6, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x4, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0x5, 0x6, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32, 0x4}, {0x1, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x2000007}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xdd}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f, 0x1}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x7fffffff, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0x400, 0x9, 0x2, 0x8}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) 7.822522281s ago: executing program 1 (id=234): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c00024a"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum, 0x0, @desc2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x800, @empty}}, 0x0, 0x0, 0xfffffffe, 0x0, 0xd2}, 0x9c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x300}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x45}, 0x2f) 5.617502323s ago: executing program 4 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)) 4.837735477s ago: executing program 1 (id=241): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e7bdb87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) 4.747441963s ago: executing program 4 (id=243): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000004}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 4.085547403s ago: executing program 1 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.062112126s ago: executing program 0 (id=246): r0 = openat$vmci(0xffffff9c, &(0x7f0000003700), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) 3.919932694s ago: executing program 4 (id=247): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001000)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b34366d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b279ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 3.813720782s ago: executing program 2 (id=248): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3404c874) socket$unix(0x1, 0x1, 0x0) 3.339371764s ago: executing program 1 (id=249): write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b884030002ab087a0100000000481093210001c0f0030584050060100000000000039815fa2c53c2", 0x34) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000540)={0x7, 0xfffffffd}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x3447504d, 0x4, 0x7, 0x9, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}) 3.318279244s ago: executing program 0 (id=250): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) socket(0x2, 0x80805, 0x0) close(r0) io_uring_setup(0x52c7, &(0x7f00000007c0)={0x0, 0x4e0a, 0x40, 0x0, 0x1000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 3.231940782s ago: executing program 4 (id=251): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c00024a"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum, 0x0, @desc2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x800, @empty}}, 0x0, 0x0, 0xfffffffe, 0x0, 0xd2}, 0x9c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x300}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x45}, 0x2f) 3.095391102s ago: executing program 2 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xb}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.345554043s ago: executing program 2 (id=253): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)) 2.336132592s ago: executing program 0 (id=254): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 2.091297905s ago: executing program 3 (id=255): unshare(0x6a040000) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000181000/0x1000)=nil, 0x1000}) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f0000000240), 0x4) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0x4018aee3, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, 0x0, &(0x7f0000000200)) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7, @ANYBLOB="d160f0e11218153dd6bea6aa2bb3b4983a65245d0d839eb4577c5c31f7005098950b1dc1a21164a91ed8e4cdbe5ad285d19731da829876a8b5cda05173283482211bfc966b5468af14833739f0bb42c67b748c8365a2669b1da6c5eeff1a1b17a3147da3417297a255e55bf39701d4740052a0f38b91211a94313d5766cd087e7b92c0b4e95d597a351ec3be616936547baf9b35033d2121ccd2e06bbb70b4f35e58358553f2da2b1cf93ff106c9440c0274cb311352c1e8f3635ec27c157eed0a3ebc885dd175fb8daf131fd460c8ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f007176c40000700000109022472510000000009040000120701030009058502000000000009058202"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120110017355782045050d800a03010203010902120001070780000904a006007a8d9102e3c9a13b302eae2670dc41cedcab33fdedb7571826fbe2dba7535d0e189c607841544169645843"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000370427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="61050565740170008008000700ac1414aa00"/34], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.936363516s ago: executing program 1 (id=256): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000004}) 1.715904946s ago: executing program 2 (id=257): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000004}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 1.148397306s ago: executing program 0 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 1.129852582s ago: executing program 1 (id=259): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x3, 0x2, &(0x7f0000000040)={0x12, "cc9e00a9a76fe4dd0c678ee30fffffffdfffffff0000000000003c00"}}) 989.681982ms ago: executing program 2 (id=260): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvmsg(0xffffffffffffffff, 0x0, 0x10100) 776.364809ms ago: executing program 0 (id=261): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) 641.714212ms ago: executing program 4 (id=262): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f00000002c0), 0x7fff, 0x400240) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100200000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601080000007f04db3900070000030500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = getpid() r7 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000001340)={{0x0, 0x2, 0x0, 0x8, 'syz0\x00'}, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x15}) process_vm_readv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/146, 0x92}], 0x2, &(0x7f0000000300)=[{&(0x7f0000000640)=""/95, 0x5f}], 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x2, 0x9, 0x506, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004084}, 0x40810) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 567.889686ms ago: executing program 2 (id=263): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)}, 0x10100) 0s ago: executing program 0 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xb}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 190.272854][ T5553] cgroup: Unknown subsys name 'net' [ 190.396995][ T5553] cgroup: Unknown subsys name 'cpuset' [ 190.412186][ T5553] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.543535][ T5553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.173786][ T5573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.187250][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.209894][ T5582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.227275][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.235691][ T5573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.244606][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.248918][ T5573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.258883][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.264136][ T5573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.273266][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.280116][ T5573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.289478][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.301645][ T5573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.305282][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.325442][ T5573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.356248][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.366916][ T5581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.385254][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.393900][ T5582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.407847][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.446944][ T5581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.456454][ T5581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.467370][ T5581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.480999][ T5581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.492012][ T5581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.436120][ T5581] Bluetooth: hci3: command tx timeout [ 203.441807][ T5581] Bluetooth: hci1: command tx timeout [ 203.509072][ T5581] Bluetooth: hci0: command tx timeout [ 203.514744][ T5576] Bluetooth: hci2: command tx timeout [ 203.586402][ T5581] Bluetooth: hci4: command tx timeout [ 203.996150][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.002767][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.517057][ T5581] Bluetooth: hci1: command tx timeout [ 205.522754][ T5576] Bluetooth: hci3: command tx timeout [ 205.596276][ T5581] Bluetooth: hci0: command tx timeout [ 205.601993][ T5576] Bluetooth: hci2: command tx timeout [ 205.668884][ T5581] Bluetooth: hci4: command tx timeout [ 205.921757][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.929789][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.938429][ T5580] bridge_slave_0: entered allmulticast mode [ 205.950273][ T5580] bridge_slave_0: entered promiscuous mode [ 206.043086][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.066458][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.082029][ T5580] bridge_slave_1: entered allmulticast mode [ 206.102054][ T5580] bridge_slave_1: entered promiscuous mode [ 206.326423][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.334015][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.343243][ T5572] bridge_slave_0: entered allmulticast mode [ 206.352098][ T5572] bridge_slave_0: entered promiscuous mode [ 206.371905][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.426493][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.434557][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.444138][ T5572] bridge_slave_1: entered allmulticast mode [ 206.455131][ T5572] bridge_slave_1: entered promiscuous mode [ 206.479995][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.525300][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.534182][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.541909][ T5589] bridge_slave_0: entered allmulticast mode [ 206.550397][ T5589] bridge_slave_0: entered promiscuous mode [ 206.665127][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.673147][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.681514][ T5589] bridge_slave_1: entered allmulticast mode [ 206.690001][ T5589] bridge_slave_1: entered promiscuous mode [ 206.811731][ T5580] team0: Port device team_slave_0 added [ 206.818599][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.826927][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.834368][ T5579] bridge_slave_0: entered allmulticast mode [ 206.844090][ T5579] bridge_slave_0: entered promiscuous mode [ 206.891657][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.934056][ T5580] team0: Port device team_slave_1 added [ 206.940601][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.948624][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.956376][ T5579] bridge_slave_1: entered allmulticast mode [ 206.964647][ T5579] bridge_slave_1: entered promiscuous mode [ 207.005609][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.015387][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.023098][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.030680][ T5571] bridge_slave_0: entered allmulticast mode [ 207.039394][ T5571] bridge_slave_0: entered promiscuous mode [ 207.134356][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.169425][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.177935][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.185298][ T5571] bridge_slave_1: entered allmulticast mode [ 207.194160][ T5571] bridge_slave_1: entered promiscuous mode [ 207.207007][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.214111][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.240410][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.283695][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.343098][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.351170][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.377546][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.400058][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.442807][ T5572] team0: Port device team_slave_0 added [ 207.500828][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.539166][ T5572] team0: Port device team_slave_1 added [ 207.552965][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.573401][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.586298][ T5581] Bluetooth: hci1: command tx timeout [ 207.592082][ T5576] Bluetooth: hci3: command tx timeout [ 207.637100][ T5589] team0: Port device team_slave_0 added [ 207.666326][ T5576] Bluetooth: hci2: command tx timeout [ 207.672028][ T5581] Bluetooth: hci0: command tx timeout [ 207.746726][ T5581] Bluetooth: hci4: command tx timeout [ 207.758838][ T5589] team0: Port device team_slave_1 added [ 207.882979][ T5579] team0: Port device team_slave_0 added [ 207.930767][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.938100][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.965182][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.002812][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.010258][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.037002][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.082696][ T5571] team0: Port device team_slave_0 added [ 208.097378][ T5579] team0: Port device team_slave_1 added [ 208.157121][ T5580] hsr_slave_0: entered promiscuous mode [ 208.165529][ T5580] hsr_slave_1: entered promiscuous mode [ 208.182359][ T5571] team0: Port device team_slave_1 added [ 208.240899][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.248257][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.274931][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.292251][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.299515][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.326539][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.398298][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.405427][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.431670][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.467900][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.475170][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.501343][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.538912][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.546129][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.572625][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.628377][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.635501][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.661939][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.802877][ T5572] hsr_slave_0: entered promiscuous mode [ 208.811227][ T5572] hsr_slave_1: entered promiscuous mode [ 208.819259][ T5572] debugfs: 'hsr0' already exists in 'hsr' [ 208.825099][ T5572] Cannot create hsr debugfs directory [ 208.897061][ T5589] hsr_slave_0: entered promiscuous mode [ 208.905504][ T5589] hsr_slave_1: entered promiscuous mode [ 208.913641][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 208.919581][ T5589] Cannot create hsr debugfs directory [ 209.096745][ T5579] hsr_slave_0: entered promiscuous mode [ 209.105065][ T5579] hsr_slave_1: entered promiscuous mode [ 209.114538][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 209.120563][ T5579] Cannot create hsr debugfs directory [ 209.208480][ T5571] hsr_slave_0: entered promiscuous mode [ 209.217621][ T5571] hsr_slave_1: entered promiscuous mode [ 209.225147][ T5571] debugfs: 'hsr0' already exists in 'hsr' [ 209.231478][ T5571] Cannot create hsr debugfs directory [ 209.676263][ T5576] Bluetooth: hci3: command tx timeout [ 209.681979][ T5581] Bluetooth: hci1: command tx timeout [ 209.746265][ T5576] Bluetooth: hci2: command tx timeout [ 209.751972][ T5581] Bluetooth: hci0: command tx timeout [ 209.836838][ T5581] Bluetooth: hci4: command tx timeout [ 210.398691][ T5580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.425763][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.438719][ T5580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.458651][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.470024][ T5580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.490927][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.518070][ T5580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.539069][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.649460][ T5572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.681427][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.692462][ T5572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.711071][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.729187][ T5572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.748250][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.769407][ T5572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.790224][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.983594][ T5579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.008164][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.027189][ T5579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.047786][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.066615][ T5579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.087287][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.111541][ T5579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.131400][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.403357][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.425158][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.439640][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.461712][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.472845][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.493098][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.505433][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.528951][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.837535][ T5571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.858480][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.870067][ T5571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.890789][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.927237][ T5571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.947291][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.980320][ T5571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.009893][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.145458][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.263782][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.402504][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.445631][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.477595][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.521712][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.529107][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.616213][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.623547][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.638559][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.646074][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.690164][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.697747][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.753034][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.862933][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.870470][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.885966][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.893367][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.931213][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.173805][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.301430][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.309102][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.554841][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.562594][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.669006][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.185262][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.304493][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.312110][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.478828][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.486350][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.975423][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.172528][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.833167][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.002142][ T5572] veth0_vlan: entered promiscuous mode [ 218.181554][ T5572] veth1_vlan: entered promiscuous mode [ 218.660646][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.761824][ T5579] veth0_vlan: entered promiscuous mode [ 218.849594][ T5572] veth0_macvtap: entered promiscuous mode [ 218.921563][ T5572] veth1_macvtap: entered promiscuous mode [ 218.954336][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.985501][ T5579] veth1_vlan: entered promiscuous mode [ 219.201556][ T5580] veth0_vlan: entered promiscuous mode [ 219.217665][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.322894][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.434283][ T5580] veth1_vlan: entered promiscuous mode [ 219.444567][ T5589] veth0_vlan: entered promiscuous mode [ 219.481338][ T5579] veth0_macvtap: entered promiscuous mode [ 219.494850][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.523287][ T1025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.563688][ T5579] veth1_macvtap: entered promiscuous mode [ 219.583060][ T1025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.604779][ T1025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.716547][ T5571] veth0_vlan: entered promiscuous mode [ 219.735097][ T5589] veth1_vlan: entered promiscuous mode [ 219.928969][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.985581][ T5571] veth1_vlan: entered promiscuous mode [ 220.054280][ T5580] veth0_macvtap: entered promiscuous mode [ 220.091881][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.164470][ T5580] veth1_macvtap: entered promiscuous mode [ 220.261920][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.271819][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.325083][ T5589] veth0_macvtap: entered promiscuous mode [ 220.351385][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.376160][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.464528][ T5589] veth1_macvtap: entered promiscuous mode [ 220.571608][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.741664][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.831392][ T5571] veth0_macvtap: entered promiscuous mode [ 220.912166][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.938380][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.985481][ T5571] veth1_macvtap: entered promiscuous mode [ 221.054477][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.086036][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.120749][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.276699][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.462487][ T165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.513853][ T165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.539674][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.584406][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.630902][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.762017][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.923542][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.954741][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.021668][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.084992][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.904115][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.945451][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.222607][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.256364][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.768459][ T5572] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.317304][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.369304][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.492329][ T5821] loop8: detected capacity change from 0 to 8 [ 226.561287][ T5821] Dev loop8: unable to read RDB block 8 [ 226.589034][ T5821] loop8: unable to read partition table [ 226.619034][ T5821] loop8: partition table beyond EOD, truncated [ 226.643970][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.651208][ T5821] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 226.695684][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.183708][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.209813][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.550195][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.592551][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.916406][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.957367][ T5583] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.965374][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.163051][ T5583] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.191833][ T5583] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.215444][ T5583] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.226019][ T5583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 229.250168][ T5583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 229.273999][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.307508][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.332486][ T5583] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.348761][ T5835] could not allocate digest TFM handle cmac(cipher_null) [ 229.384295][ T5583] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.396410][ T5583] usb 3-1: Product: syz [ 229.404092][ T5583] usb 3-1: Manufacturer: syz [ 229.475675][ T5583] cdc_wdm 3-1:1.0: skipping garbage [ 229.495604][ T5583] cdc_wdm 3-1:1.0: skipping garbage [ 229.533604][ T5583] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 229.558628][ T5583] cdc_wdm 3-1:1.0: Unknown control protocol [ 229.782935][ T10] usb 3-1: USB disconnect, device number 2 [ 229.946399][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.995996][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.496976][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.549271][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.833209][ T5859] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 230.996546][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10'. [ 232.538081][ T5881] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 232.881621][ T5881] team0: Port device wlan0 added [ 233.305103][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 233.729576][ T5896] input: syz0 as /devices/virtual/input/input5 [ 235.836823][ T5924] trusted_key: encrypted_key: insufficient parameters specified [ 236.063052][ T5920] Zero length message leads to an empty skb [ 236.113469][ T5930] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 236.190914][ T5929] fuse: root generation should be zero [ 236.263319][ T29] audit: type=1326 audit(1779046926.463:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 236.381656][ T29] audit: type=1326 audit(1779046926.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 236.505144][ T29] audit: type=1326 audit(1779046926.443:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 236.643984][ T29] audit: type=1326 audit(1779046926.553:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 236.781080][ T29] audit: type=1326 audit(1779046926.553:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 236.913483][ T29] audit: type=1326 audit(1779046926.593:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 237.122667][ T29] audit: type=1326 audit(1779046926.683:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 237.262688][ T29] audit: type=1326 audit(1779046926.693:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 237.418980][ T29] audit: type=1326 audit(1779046926.723:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 237.613072][ T29] audit: type=1326 audit(1779046926.723:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.28" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x7ffc0000 [ 237.753133][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 238.578106][ T5951] loop1: detected capacity change from 0 to 16384 [ 242.444206][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.44'. [ 244.333267][ T5988] syzkaller0: entered promiscuous mode [ 244.359006][ T5988] syzkaller0: entered allmulticast mode [ 245.513497][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 245.708717][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 245.779751][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.844794][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.913102][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.985604][ T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 246.063860][ T24] usb 5-1: Product: syz [ 246.099175][ T24] usb 5-1: Manufacturer: syz [ 246.193549][ T24] hub 5-1:4.0: USB hub found [ 246.403065][ T24] hub 5-1:4.0: 2 ports detected [ 246.716879][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.772411][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.845014][ T24] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 246.898448][ T24] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 247.070596][ T24] usb 5-1: USB disconnect, device number 2 [ 248.402002][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 248.554829][ T6022] syzkaller0: entered promiscuous mode [ 248.573079][ T6022] syzkaller0: entered allmulticast mode [ 248.597746][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 248.623953][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.677635][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.761063][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.842791][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 248.911347][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.953410][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.977028][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.000706][ T24] usb 5-1: Manufacturer: syz [ 249.053546][ T24] usb 5-1: config 0 descriptor?? [ 249.672200][ T24] rc_core: IR keymap rc-hauppauge not found [ 249.687006][ T24] Registered IR keymap rc-empty [ 249.703738][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.756610][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.809249][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 249.921080][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 250.091055][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.217055][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.277651][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.357188][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.426465][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.468660][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.518558][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.580086][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.628432][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.688916][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 250.771942][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 250.829970][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 250.921379][ T24] usb 5-1: USB disconnect, device number 3 [ 251.936111][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 252.163201][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.221748][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 252.274366][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.340097][ T24] usb 5-1: config 0 descriptor?? [ 252.648836][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.693550][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.172839][ T24] ath6kl: Failed to read usb control message: -71 [ 253.215602][ T24] ath6kl: Unable to read the bmi data from the device: -71 [ 253.254206][ T24] ath6kl: Unable to recv target info: -71 [ 253.286345][ T24] ath6kl: Failed to init ath6kl core: -71 [ 253.337271][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 253.469035][ T24] usb 5-1: USB disconnect, device number 4 [ 253.666107][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 253.798280][ T6075] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 253.836630][ T6075] PKCS7: Only support pkcs7_signedData type [ 255.231027][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 255.425714][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 255.521671][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 255.574235][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.619056][ T24] usb 5-1: Product: syz [ 255.632530][ T24] usb 5-1: Manufacturer: syz [ 255.649627][ T24] usb 5-1: SerialNumber: syz [ 255.691506][ T24] usb 5-1: config 0 descriptor?? [ 256.186098][ T24] airspy 5-1:0.0: Board ID: 00 [ 256.213038][ T24] airspy 5-1:0.0: Firmware version: [ 256.601969][ T24] airspy 5-1:0.0: usb_control_msg() failed -32 request 0e [ 256.667860][ T24] airspy 5-1:0.0: Registered as swradio24 [ 256.704105][ T24] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 258.288169][ T5679] usb 5-1: USB disconnect, device number 5 [ 259.247561][ T5679] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.438103][ T5679] usb 5-1: device descriptor read/64, error -71 [ 259.717241][ T5679] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 259.918492][ T5679] usb 5-1: device descriptor read/64, error -71 [ 260.058800][ T5679] usb usb5-port1: attempt power cycle [ 260.448328][ T5679] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 260.512873][ T5679] usb 5-1: device descriptor read/8, error -71 [ 260.798121][ T5679] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 260.859864][ T5679] usb 5-1: device descriptor read/8, error -71 [ 260.999765][ T5679] usb usb5-port1: unable to enumerate USB device [ 263.650890][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 263.861242][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 263.921455][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.941169][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.981761][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 264.023327][ T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 264.039984][ T24] usb 5-1: Product: syz [ 264.044750][ T24] usb 5-1: Manufacturer: syz [ 264.101077][ T24] hub 5-1:4.0: USB hub found [ 264.125187][ T6158] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 264.300518][ T24] hub 5-1:4.0: 2 ports detected [ 264.462607][ T6158] team0: Port device wlan0 added [ 264.628545][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.725558][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.829620][ T24] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 264.864990][ T24] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 264.916096][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 264.916172][ T29] audit: type=1326 audit(1779046955.133:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.120" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72f0d9ce59 code=0x0 [ 265.014562][ T24] usb 5-1: USB disconnect, device number 10 [ 265.445613][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.454237][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.731591][ T6175] syzkaller0: entered promiscuous mode [ 265.744607][ T6175] syzkaller0: entered allmulticast mode [ 266.134624][ T6182] C: renamed from batadv_slave_0 (while UP) [ 266.209456][ T6182] netlink: 140 bytes leftover after parsing attributes in process `syz.4.126'. [ 266.244798][ T6184] sg_write: process 54 (syz.2.127) changed security contexts after opening file descriptor, this is not allowed. [ 267.020359][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 267.239875][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.278533][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.306329][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.336339][ T24] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 267.374640][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.447398][ T24] usb 5-1: config 0 descriptor?? [ 267.726422][ T5679] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 267.921556][ T5679] usb 4-1: Using ep0 maxpacket: 32 [ 267.960197][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 267.975302][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 267.990366][ T5679] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.054744][ T24] usb 5-1: USB disconnect, device number 11 [ 268.069715][ T5679] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.120412][ T5679] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 268.161651][ T5679] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 268.195234][ T5679] usb 4-1: Product: syz [ 268.219438][ T5679] usb 4-1: Manufacturer: syz [ 268.312619][ T5679] hub 4-1:4.0: USB hub found [ 268.492947][ T5679] hub 4-1:4.0: 2 ports detected [ 268.798179][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.832192][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.855728][ T6215] C: renamed from batadv_slave_0 (while UP) [ 268.946917][ T5679] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 268.981025][ T5679] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 269.081106][ T6215] netlink: 140 bytes leftover after parsing attributes in process `syz.0.141'. [ 269.143486][ T5679] usb 4-1: USB disconnect, device number 2 [ 270.124977][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 271.506829][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 271.776411][ T6248] netlink: 204 bytes leftover after parsing attributes in process `syz.3.156'. [ 271.844285][ T6248] netlink: 84 bytes leftover after parsing attributes in process `syz.3.156'. [ 272.251415][ T5679] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.456654][ T5679] usb 3-1: Using ep0 maxpacket: 32 [ 272.486821][ T5679] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.522021][ T5679] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.575091][ T5679] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 272.607938][ T5679] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 272.630536][ T5679] usb 3-1: Product: syz [ 272.663327][ T5679] usb 3-1: Manufacturer: syz [ 272.742976][ T5679] hub 3-1:4.0: USB hub found [ 272.956510][ T5679] hub 3-1:4.0: 2 ports detected [ 273.233317][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.282936][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.356328][ T5679] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 273.375656][ T5679] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 273.533167][ T5679] usb 3-1: USB disconnect, device number 3 [ 275.736239][ T5679] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 275.935909][ T5679] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 275.972528][ T5679] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.065124][ T5679] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 276.125141][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.192092][ T5679] usb 3-1: Product: syz [ 276.219213][ T5679] usb 3-1: Manufacturer: syz [ 276.262155][ T5679] usb 3-1: SerialNumber: syz [ 276.433201][ T5679] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 276.603019][ T4918] bcm5974 3-1:1.0: could not read from device [ 276.673602][ T4918] bcm5974 3-1:1.0: could not read from device [ 276.711904][ T5679] usb 3-1: USB disconnect, device number 4 [ 276.737455][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 276.778174][ T4918] bcm5974 3-1:1.0: could not read from device [ 276.948486][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 276.990869][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 277.017094][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.033791][ T24] usb 5-1: Product: syz [ 277.044893][ T24] usb 5-1: Manufacturer: syz [ 277.056414][ T24] usb 5-1: SerialNumber: syz [ 277.080253][ T24] usb 5-1: config 0 descriptor?? [ 277.575980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 277.791662][ T24] airspy 5-1:0.0: Board ID: 00 [ 277.811122][ T24] airspy 5-1:0.0: Firmware version: [ 278.928347][ T24] airspy 5-1:0.0: usb_control_msg() failed -110 request 11 [ 279.656171][ T5679] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 280.257228][ T5679] usb 4-1: Using ep0 maxpacket: 32 [ 280.723615][ T5679] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.982459][ T5679] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.642932][ T24] airspy 5-1:0.0: Registered as swradio24 [ 283.026591][ T24] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 284.312315][ T5679] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 284.386208][ T24] usb 5-1: USB disconnect, device number 12 [ 284.415647][ T5679] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 284.555596][ T5679] usb 4-1: can't set config #4, error -71 [ 284.557305][ T6205] udevd[6205]: setting mode of /dev/bus/usb/005/012 to 020664 failed: No such file or directory [ 284.672995][ T6205] udevd[6205]: setting owner of /dev/bus/usb/005/012 to uid=0, gid=0 failed: No such file or directory [ 284.706584][ T5679] usb 4-1: USB disconnect, device number 3 [ 285.383234][ T5679] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 285.606593][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 285.674949][ T5679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.710804][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.718679][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 285.741107][ T5679] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.796318][ T5679] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 285.855033][ T5679] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 285.887006][ T5679] usb 5-1: Manufacturer: syz [ 285.909692][ T5679] usb 5-1: config 0 descriptor?? [ 285.940534][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 285.982797][ T24] usb 2-1: config 0 has no interfaces? [ 285.996617][ T24] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 286.020066][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.047544][ T24] usb 2-1: config 0 descriptor?? [ 286.324838][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.387434][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.504952][ T5679] usb 2-1: USB disconnect, device number 2 [ 287.139304][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 287.159894][ T141] bond0: (slave bond_slave_0): interface is now down [ 287.213760][ T141] bond0: (slave bond_slave_1): interface is now down [ 287.255463][ T141] bond0: now running without any active interface! [ 287.444112][ T6340] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 287.656392][ T6340] team0: Port device wlan0 added [ 288.143821][ T5679] usb 5-1: USB disconnect, device number 13 [ 290.365548][ T6387] netlink: 'syz.3.206': attribute type 10 has an invalid length. [ 290.616910][ T5583] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 290.800506][ T5583] usb 1-1: Using ep0 maxpacket: 16 [ 290.842788][ T5583] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.878435][ T5583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.914784][ T5583] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.974708][ T5583] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 291.004556][ T5583] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.025302][ T5583] usb 1-1: Manufacturer: syz [ 291.114524][ T5583] usb 1-1: config 0 descriptor?? [ 292.043511][ T6404] netlink: 'syz.1.213': attribute type 33 has an invalid length. [ 292.092711][ T6404] netlink: 152 bytes leftover after parsing attributes in process `syz.1.213'. [ 293.641984][ T24] usb 1-1: USB disconnect, device number 2 [ 294.148315][ T6431] netlink: 'syz.2.221': attribute type 10 has an invalid length. [ 297.568270][ T5679] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 297.778100][ T5679] usb 5-1: Using ep0 maxpacket: 32 [ 297.842811][ T5679] usb 5-1: config index 0 descriptor too short (expected 115, got 27) [ 297.889692][ T5679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.964395][ T5679] usb 5-1: config 0 has no interfaces? [ 298.051300][ T5679] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 298.095287][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.129280][ T5679] usb 5-1: Product: syz [ 298.136511][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.167579][ T5679] usb 5-1: Manufacturer: syz [ 298.184810][ T5679] usb 5-1: SerialNumber: syz [ 298.223572][ T5679] usb 5-1: config 0 descriptor?? [ 298.330381][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 298.371155][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.416239][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.479357][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.513057][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 298.540567][ T24] usb 2-1: Product: syz [ 298.540853][ T5679] usb 5-1: USB disconnect, device number 14 [ 298.584521][ T24] usb 2-1: Manufacturer: syz [ 298.702337][ T24] hub 2-1:4.0: USB hub found [ 298.906514][ T24] hub 2-1:4.0: 2 ports detected [ 299.201980][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.250037][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.351880][ T24] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 299.386867][ T24] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 299.596314][ T24] usb 2-1: USB disconnect, device number 3 [ 300.333949][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.240'. [ 302.637978][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 302.846423][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 302.889920][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.932532][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.961708][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.002226][ T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 303.036306][ T24] usb 5-1: Product: syz [ 303.054895][ T24] usb 5-1: Manufacturer: syz [ 303.145842][ T24] hub 5-1:4.0: USB hub found [ 303.333484][ T24] hub 5-1:4.0: 2 ports detected [ 303.610621][ T6520] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 303.634365][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.675627][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.788520][ T24] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 303.802071][ T24] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 303.931339][ T24] usb 5-1: USB disconnect, device number 15 [ 304.425423][ T5583] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 304.517700][ T6520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.596992][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 304.636803][ T5583] usb 4-1: Using ep0 maxpacket: 32 [ 304.667380][ T5583] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 304.721088][ T5583] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 304.755362][ T5583] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 304.782163][ T5583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 304.796098][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 304.816449][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.832160][ T5583] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 304.846174][ T6525] gretap1: entered promiscuous mode [ 304.871519][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.886972][ T5583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.911874][ T5583] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 304.925726][ T24] usb 2-1: config 0 descriptor?? [ 304.955070][ T5583] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 305.067621][ T5583] usb 4-1: New USB device found, idVendor=07f0, idProduct=6c17, bcdDevice= 0.40 [ 305.138236][ T5583] usb 4-1: New USB device strings: Mfr=7, Product=0, SerialNumber=0 [ 305.204118][ T5583] usb 4-1: Manufacturer: syz [ 305.218255][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 305.268460][ T5583] usb 4-1: config 0 descriptor?? [ 305.298088][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.382430][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 305.408470][ T24] usb 2-1: media controller created [ 305.447220][ T6530] ===================================================== [ 305.454555][ T6530] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 305.462267][ T6530] _copy_to_user+0xcc/0x120 [ 305.467146][ T6530] i2cdev_ioctl_smbus+0x586/0x660 [ 305.472383][ T6530] i2cdev_ioctl+0xa14/0xf40 [ 305.477084][ T6530] __se_sys_ioctl+0x23c/0x400 [ 305.481892][ T6530] __x64_sys_ioctl+0x97/0xe0 [ 305.486674][ T6530] x64_sys_call+0x1975/0x3ea0 [ 305.491473][ T6530] do_syscall_64+0x134/0xf80 [ 305.496418][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.504567][ T6530] [ 305.507105][ T6530] Uninit was stored to memory at: [ 305.512340][ T6530] __i2c_smbus_xfer+0x25e1/0x3050 [ 305.517573][ T6530] i2c_smbus_xfer+0x2d8/0x480 [ 305.522366][ T6530] i2cdev_ioctl_smbus+0x4a1/0x660 [ 305.529020][ T6530] i2cdev_ioctl+0xa14/0xf40 [ 305.533887][ T6530] __se_sys_ioctl+0x23c/0x400 [ 305.538800][ T6530] __x64_sys_ioctl+0x97/0xe0 [ 305.543496][ T6530] x64_sys_call+0x1975/0x3ea0 [ 305.549299][ T6530] do_syscall_64+0x134/0xf80 [ 305.554017][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.560236][ T6530] [ 305.562664][ T6530] Local variable msgbuf1.i created at: [ 305.568462][ T6530] __i2c_smbus_xfer+0x972/0x3050 [ 305.573564][ T6530] i2c_smbus_xfer+0x2d8/0x480 [ 305.578948][ T6530] [ 305.581307][ T6530] Byte 0 of 1 is uninitialized [ 305.586580][ T6530] Memory access of size 1 starts at ffff888055717d06 [ 305.593577][ T6530] Data copied to user address 0000200000000040 [ 305.599937][ T6530] [ 305.602341][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.1.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.613323][ T6530] Tainted: [L]=SOFTLOCKUP [ 305.617816][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.628117][ T6530] ===================================================== [ 305.636307][ T6530] Disabling lock debugging due to kernel taint [ 305.800526][ T6530] Kernel panic - not syncing: kmsan.panic set ... [ 305.807101][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.1.259 Tainted: G B L syzkaller #0 PREEMPT(full) [ 305.818083][ T6530] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 305.823752][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.833939][ T6530] Call Trace: [ 305.837294][ T6530] [ 305.840308][ T6530] __dump_stack+0x26/0x30 [ 305.844749][ T6530] dump_stack_lvl+0x50/0x1c0 [ 305.849461][ T6530] ? dump_stack+0x12/0x25 [ 305.853885][ T6530] dump_stack+0x1e/0x25 [ 305.858133][ T6530] vpanic+0x7b4/0x1430 [ 305.862333][ T6530] panic+0x15d/0x160 [ 305.866371][ T6530] kmsan_report+0x31a/0x320 [ 305.871001][ T6530] ? kmsan_internal_check_memory+0x1e8/0x240 [ 305.877101][ T6530] ? kmsan_copy_to_user+0xef/0x190 [ 305.882341][ T6530] ? _copy_to_user+0xcc/0x120 [ 305.887156][ T6530] ? i2cdev_ioctl_smbus+0x586/0x660 [ 305.892483][ T6530] ? i2cdev_ioctl+0xa14/0xf40 [ 305.897260][ T6530] ? __se_sys_ioctl+0x23c/0x400 [ 305.902238][ T6530] ? __x64_sys_ioctl+0x97/0xe0 [ 305.907122][ T6530] ? x64_sys_call+0x1975/0x3ea0 [ 305.912087][ T6530] ? do_syscall_64+0x134/0xf80 [ 305.916953][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.923120][ T6530] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 305.928568][ T6530] ? __i2c_transfer+0x1189/0x31c0 [ 305.933685][ T6530] ? kmsan_get_metadata+0xf1/0x160 [ 305.938922][ T6530] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 305.945442][ T6530] ? kmsan_get_metadata+0xf1/0x160 [ 305.950669][ T6530] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 305.956615][ T6530] ? __i2c_smbus_xfer+0x1fd0/0x3050 [ 305.961956][ T6530] ? kmsan_get_metadata+0xf1/0x160 [ 305.967202][ T6530] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 305.973153][ T6530] kmsan_internal_check_memory+0x1e8/0x240 [ 305.979091][ T6530] kmsan_copy_to_user+0xef/0x190 [ 305.984159][ T6530] _copy_to_user+0xcc/0x120 [ 305.988791][ T6530] i2cdev_ioctl_smbus+0x586/0x660 [ 305.993971][ T6530] i2cdev_ioctl+0xa14/0xf40 [ 305.998568][ T6530] ? kmsan_report+0x2f3/0x320 [ 306.003366][ T6530] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 306.008500][ T6530] __se_sys_ioctl+0x23c/0x400 [ 306.013316][ T6530] __x64_sys_ioctl+0x97/0xe0 [ 306.018014][ T6530] x64_sys_call+0x1975/0x3ea0 [ 306.022805][ T6530] do_syscall_64+0x134/0xf80 [ 306.027525][ T6530] ? clear_bhb_loop+0x50/0xa0 [ 306.032318][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.038357][ T6530] RIP: 0033:0x7f1e36b9ce59 [ 306.042858][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.062570][ T6530] RSP: 002b:00007f1e37a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.071085][ T6530] RAX: ffffffffffffffda RBX: 00007f1e36e15fa0 RCX: 00007f1e36b9ce59 [ 306.079138][ T6530] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 306.087181][ T6530] RBP: 00007f1e36c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 306.095217][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.103247][ T6530] R13: 00007f1e36e16038 R14: 00007f1e36e15fa0 R15: 00007ffc9aed6e98 [ 306.111317][ T6530] [ 306.116600][ T6530] Kernel Offset: disabled [ 306.121031][ T6530] Rebooting in 86400 seconds..