last executing test programs: 2m17.504635948s ago: executing program 0 (id=180): syz_open_dev$loop(0x0, 0xd76, 0x181400) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'vxcan1\x00'}}, 0x1e) 2m17.199566709s ago: executing program 0 (id=181): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m16.696391862s ago: executing program 0 (id=184): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0xc, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x4, 0x0, @void}}}}}}}}, 0x0) 2m16.042564195s ago: executing program 0 (id=187): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2m15.909015739s ago: executing program 0 (id=189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c9629c40f805d6c52de09d1cb8d7852426887c7aaafd71e550d9b3ff939f08a1c9dc3dbf4a8506b848be85def03e678733b4c3e3d478cd237a8ab9e096b44edce43d2da356a5bf6b40ba148f7183934280962c583ad2a577987cdf66a169c117768dbd9e3687ef9d7182187f696a2f7bd7a7e389a786f2b8e1e3c78c8051de68bce6ca461a34c8094d", 0x89}], 0x1, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x18}, 0x4004045) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff006) 2m15.59862053s ago: executing program 0 (id=190): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffffffffffffa8, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x0, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x14, 0xf989, "e2ac840ffb8dff845cd9d0ec1d738592"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x6, [0x4]}, @exp_fastopen={0xfe, 0x9, 0xf989, "c2c468060d"}, @md5sig={0x13, 0xfffffffffffffc52, "c46225991ffcf7652759cd7197521cf6"}]}}, {"c5c64992eee1190533224bfed87752df9435af9ea0f5948fc5b53fb7f19041f96960c57627ab4a20bbd271c3ee6c4dd9a3f5c75c2c493ce9"}}}}}}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) 2m0.456061036s ago: executing program 32 (id=190): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffffffffffffa8, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x0, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x14, 0xf989, "e2ac840ffb8dff845cd9d0ec1d738592"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x6, [0x4]}, @exp_fastopen={0xfe, 0x9, 0xf989, "c2c468060d"}, @md5sig={0x13, 0xfffffffffffffc52, "c46225991ffcf7652759cd7197521cf6"}]}}, {"c5c64992eee1190533224bfed87752df9435af9ea0f5948fc5b53fb7f19041f96960c57627ab4a20bbd271c3ee6c4dd9a3f5c75c2c493ce9"}}}}}}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) 24.514816337s ago: executing program 3 (id=396): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="052406000000000030001280"], 0x6c}}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 12.94026263s ago: executing program 3 (id=410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRESDEC, @ANYRESOCT=r1, @ANYBLOB="992f4904ca20848c2d142814bc7c4ea2de3e4e66a4c3d8dbaa2433825349aac703810c41b1617bf672898806f6143bcb9c73ad78d4f7d029e844128bbecaaa679413c2b00b612460974e89406dad2695fd9fc65317963432f6d0cc8361f9777880dc1a0b7e86941906e4d6539a58dd63adfe067622f94e45897e7a94da9efe7fea3a7d623b25aeab46e2299099ea1cfe9fe7c9d950bd749a46dc208d1b453239142f76a4e38ce06047d525732f687348ff2b25554c8e5b21380084c9048bfdf4373a12e019", @ANYRESOCT, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x3000000000, 0xf}, &(0x7f0000000240)=0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001800040000003d00ee8008003900", @ANYRES32, @ANYBLOB="0800c0000000000004004f80f01254c8a325874b7a364f60eb18eb3e374838d32bfdcf08009e0064010102a5fa1bc096f7000000"], 0x1010}], 0x1, 0x0, 0x0, 0x10004800}, 0xc000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10162) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r5, 0x64}, &(0x7f0000000140)=0x8) 9.81783795s ago: executing program 1 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x20000) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, '\x00', 0x39}, 0x800}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000000c0)=']){%%)^&!+)\x00', &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0xfffffffb, 0x0, 0x2000000, 0x5}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030000000000000000000001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044941, &(0x7f0000003d00)) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r9) 9.277896848s ago: executing program 4 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x41) 8.925111649s ago: executing program 4 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x8000000) r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000180000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 8.346947028s ago: executing program 4 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.845330541s ago: executing program 4 (id=426): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 6.375758005s ago: executing program 3 (id=427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, 0x0, 0x0, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x200, 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.850121218s ago: executing program 3 (id=430): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="052406000000000030001280"], 0x6c}}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 5.207404561s ago: executing program 3 (id=431): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') 5.033124695s ago: executing program 1 (id=432): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x402000, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x400, 0x9004}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, 0x0) 4.762903105s ago: executing program 2 (id=433): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 4.561641627s ago: executing program 2 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x8000000) r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000180000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 4.157209004s ago: executing program 2 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.50673471s ago: executing program 1 (id=436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pivot_root(&(0x7f0000000000)='.\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1c0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x82}}, 0x2, 0x0, 0x0, 0x5}}, 0x2e) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000010000000e0000001000000000000000000000000ac1414bb000000000000000000000000fffe000bffff00000a0080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000008400050000000000000000000000000000000001000000003200000000000000e00000010000000000000000040000000335000001000000000000000000000000000000ff0100000000000000000000000000c85f00000033000000000000000a01"], 0x13c}}, 0x0) 2.506250663s ago: executing program 3 (id=437): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x10800, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x20}, {0x0, 0x10000, 0xfffffffffffffffd}}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 2.421680573s ago: executing program 4 (id=438): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r5, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) 2.311706201s ago: executing program 2 (id=439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, 0x0, 0x0, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x200, 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.07719973s ago: executing program 2 (id=440): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272"], 0x6c}}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 586.181732ms ago: executing program 1 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 507.883108ms ago: executing program 4 (id=442): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1a00, 0x9211, 0x0, 0x0}], 0x1}) 366.958088ms ago: executing program 1 (id=443): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 214.287764ms ago: executing program 1 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x0, 0x0, 0xa805e97d205b7b62) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) unlink(0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x2a1) write$binfmt_script(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @any, 0x5, 0x1}, 0xe) listen(r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 2 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, 0x0, 0x20000) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa001e"], 0x18) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 87.009131][ T10] cfg80211: failed to load regulatory.db [ 87.353258][ T5823] cgroup: Unknown subsys name 'net' [ 87.609470][ T5823] cgroup: Unknown subsys name 'cpuset' [ 87.675061][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.658431][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.991867][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.008863][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.013123][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.014032][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.017006][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.021047][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.022216][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.023057][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.023514][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.025504][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.026707][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.032224][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.033169][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.045768][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.062696][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.064105][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.065110][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.067115][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.088082][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.089025][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.173803][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.179173][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.179954][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.181248][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.199495][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.102536][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 95.164250][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 95.210655][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 95.314584][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 95.995060][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 96.012950][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.014250][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.015828][ T5843] bridge_slave_0: entered allmulticast mode [ 96.018802][ T5843] bridge_slave_0: entered promiscuous mode [ 96.136622][ T59] Bluetooth: hci0: command tx timeout [ 96.136768][ T59] Bluetooth: hci1: command tx timeout [ 96.136843][ T59] Bluetooth: hci3: command tx timeout [ 96.136926][ T59] Bluetooth: hci2: command tx timeout [ 96.207703][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.207867][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.208082][ T5843] bridge_slave_1: entered allmulticast mode [ 96.209913][ T5843] bridge_slave_1: entered promiscuous mode [ 96.212689][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.212780][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.213152][ T5834] bridge_slave_0: entered allmulticast mode [ 96.217881][ T5834] bridge_slave_0: entered promiscuous mode [ 96.284561][ T5836] Bluetooth: hci4: command tx timeout [ 96.516143][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.516318][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.516526][ T5834] bridge_slave_1: entered allmulticast mode [ 96.519796][ T5834] bridge_slave_1: entered promiscuous mode [ 96.686194][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.686385][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.686591][ T5839] bridge_slave_0: entered allmulticast mode [ 96.689790][ T5839] bridge_slave_0: entered promiscuous mode [ 96.888286][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.888454][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.888764][ T5835] bridge_slave_0: entered allmulticast mode [ 96.891979][ T5835] bridge_slave_0: entered promiscuous mode [ 96.932590][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.932754][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.932964][ T5839] bridge_slave_1: entered allmulticast mode [ 96.942324][ T5839] bridge_slave_1: entered promiscuous mode [ 96.958746][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.063822][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.063959][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.064111][ T5835] bridge_slave_1: entered allmulticast mode [ 97.067046][ T5835] bridge_slave_1: entered promiscuous mode [ 97.182623][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.187589][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.560500][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.711116][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.871410][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.948625][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.950714][ T5843] team0: Port device team_slave_0 added [ 98.042976][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.043271][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.043432][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.043555][ T5848] bridge_slave_0: entered allmulticast mode [ 98.049078][ T5848] bridge_slave_0: entered promiscuous mode [ 98.159663][ T5843] team0: Port device team_slave_1 added [ 98.164026][ T5834] team0: Port device team_slave_0 added [ 98.214657][ T5836] Bluetooth: hci2: command tx timeout [ 98.214708][ T5836] Bluetooth: hci3: command tx timeout [ 98.214733][ T5836] Bluetooth: hci1: command tx timeout [ 98.214894][ T59] Bluetooth: hci0: command tx timeout [ 98.278227][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.278420][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.278650][ T5848] bridge_slave_1: entered allmulticast mode [ 98.282054][ T5848] bridge_slave_1: entered promiscuous mode [ 98.364617][ T5836] Bluetooth: hci4: command tx timeout [ 98.473623][ T5834] team0: Port device team_slave_1 added [ 98.778904][ T5839] team0: Port device team_slave_0 added [ 98.949930][ T5835] team0: Port device team_slave_0 added [ 99.029247][ T5839] team0: Port device team_slave_1 added [ 99.030624][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.030636][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.030651][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.152130][ T5835] team0: Port device team_slave_1 added [ 99.156921][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.240607][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.240621][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.240637][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.241670][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.241680][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.241695][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.401269][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.499739][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.499758][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.499788][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.693627][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.693640][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.693659][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.724785][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.724802][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.724827][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.865713][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.865728][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.865744][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.868303][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.868316][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.868331][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.870314][ T5848] team0: Port device team_slave_0 added [ 100.006292][ T5848] team0: Port device team_slave_1 added [ 100.284839][ T5836] Bluetooth: hci0: command tx timeout [ 100.284870][ T5836] Bluetooth: hci1: command tx timeout [ 100.284890][ T5836] Bluetooth: hci3: command tx timeout [ 100.304376][ T5847] Bluetooth: hci2: command tx timeout [ 100.361617][ T5843] hsr_slave_0: entered promiscuous mode [ 100.362719][ T5843] hsr_slave_1: entered promiscuous mode [ 100.444666][ T5847] Bluetooth: hci4: command tx timeout [ 100.639752][ T5834] hsr_slave_0: entered promiscuous mode [ 100.641362][ T5834] hsr_slave_1: entered promiscuous mode [ 100.642553][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 100.642659][ T5834] Cannot create hsr debugfs directory [ 100.737135][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.737153][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.737182][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.908536][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.908554][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.908583][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.169152][ T5839] hsr_slave_0: entered promiscuous mode [ 101.170761][ T5839] hsr_slave_1: entered promiscuous mode [ 101.171826][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 101.171852][ T5839] Cannot create hsr debugfs directory [ 101.210782][ T5835] hsr_slave_0: entered promiscuous mode [ 101.212392][ T5835] hsr_slave_1: entered promiscuous mode [ 101.213442][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 101.213469][ T5835] Cannot create hsr debugfs directory [ 101.859155][ T5848] hsr_slave_0: entered promiscuous mode [ 101.860809][ T5848] hsr_slave_1: entered promiscuous mode [ 101.861887][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 101.861914][ T5848] Cannot create hsr debugfs directory [ 102.364509][ T5847] Bluetooth: hci2: command tx timeout [ 102.364545][ T5847] Bluetooth: hci3: command tx timeout [ 102.364568][ T5847] Bluetooth: hci1: command tx timeout [ 102.364591][ T5847] Bluetooth: hci0: command tx timeout [ 102.534505][ T5836] Bluetooth: hci4: command tx timeout [ 103.178543][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.210812][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.253266][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.311819][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.457686][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.510019][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.548276][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.610714][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.818191][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.861704][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.909621][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.974228][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.173394][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.210678][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.253155][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.320185][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.399399][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.516433][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.580642][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.637288][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.691673][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.738591][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.814106][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.814852][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.859205][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.888306][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.888650][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.024739][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.097859][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.101069][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.101210][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.166187][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.166360][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.249672][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.312622][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.312875][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.324102][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.415498][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.415783][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.527500][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.619215][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.619550][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.699211][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.733337][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.733522][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.892734][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.995737][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.996183][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.026830][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.051639][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.054565][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.349170][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.514128][ T5843] veth0_vlan: entered promiscuous mode [ 106.617662][ T5843] veth1_vlan: entered promiscuous mode [ 106.648981][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.833231][ T5834] veth0_vlan: entered promiscuous mode [ 106.906876][ T5834] veth1_vlan: entered promiscuous mode [ 106.913534][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.949466][ T5843] veth0_macvtap: entered promiscuous mode [ 107.004167][ T5843] veth1_macvtap: entered promiscuous mode [ 107.093650][ T5839] veth0_vlan: entered promiscuous mode [ 107.166627][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.198406][ T5839] veth1_vlan: entered promiscuous mode [ 107.208927][ T5834] veth0_macvtap: entered promiscuous mode [ 107.213643][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.227417][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.323179][ T5834] veth1_macvtap: entered promiscuous mode [ 107.360890][ T1229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.385262][ T1229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.392752][ T1229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.393957][ T5835] veth0_vlan: entered promiscuous mode [ 107.408447][ T1229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.561155][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.562872][ T5835] veth1_vlan: entered promiscuous mode [ 107.685498][ T5839] veth0_macvtap: entered promiscuous mode [ 107.699176][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.787102][ T5839] veth1_macvtap: entered promiscuous mode [ 107.824861][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.852591][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.882946][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.893664][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.998599][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.003518][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.003553][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.108581][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.109365][ T5835] veth0_macvtap: entered promiscuous mode [ 108.238449][ T5835] veth1_macvtap: entered promiscuous mode [ 108.267762][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.274584][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.274604][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.317288][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.340779][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.384530][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.405890][ T5848] veth0_vlan: entered promiscuous mode [ 108.410482][ T1437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.410502][ T1437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.642461][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.646829][ T5848] veth1_vlan: entered promiscuous mode [ 108.732279][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.732302][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.793416][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.911237][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.938370][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.949643][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.975950][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.978547][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.978567][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.269226][ T5960] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'. [ 109.312858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.312881][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.460129][ T5848] veth0_macvtap: entered promiscuous mode [ 109.567422][ T5848] veth1_macvtap: entered promiscuous mode [ 109.827639][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.827665][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.117660][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.264353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.354362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.074333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.134337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.224359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.254323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.254876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.255471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.256803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.257976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.599154][ T1437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.599178][ T1437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.607560][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.982613][ T1229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.982943][ T1229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.983217][ T1229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.987761][ T1229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.769520][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.099956][ T1437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.099977][ T1437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.672434][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.672471][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.739723][ T6000] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 114.214796][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 114.214834][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19'. [ 114.457152][ T6011] process 'syz.2.17' launched './file0' with NULL argv: empty string added [ 114.534831][ T6009] Zero length message leads to an empty skb [ 117.236567][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.424627][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 117.428999][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.449898][ T6040] netlink: 'syz.4.23': attribute type 2 has an invalid length. [ 117.483731][ T49] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 117.483762][ T49] usb 2-1: config 4 has no interface number 0 [ 117.483800][ T49] usb 2-1: config 4 interface 30 has no altsetting 0 [ 117.578398][ T49] usb 2-1: string descriptor 0 read error: -22 [ 117.578664][ T49] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 117.578689][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.792012][ T49] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 117.792046][ T49] dw2102: su3000_power_ctrl: 1, initialized 0 [ 117.792294][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 118.162135][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.189731][ T49] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 118.189834][ T49] usb 2-1: media controller created [ 118.190341][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 118.190361][ T49] dw2102: i2c transfer failed. [ 118.190380][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 118.190394][ T49] dw2102: i2c transfer failed. [ 118.190408][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 118.190422][ T49] dw2102: i2c transfer failed. [ 118.190439][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 118.190453][ T49] dw2102: i2c transfer failed. [ 118.190471][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 118.190485][ T49] dw2102: i2c transfer failed. [ 118.190501][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 118.190514][ T49] dw2102: i2c transfer failed. [ 118.190524][ T49] dvb-usb: MAC address: 02:02:02:02:02:02 [ 118.495826][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.841081][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 118.841107][ T49] dw2102: command 0x0e transfer failed. [ 118.841117][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 118.841132][ T49] dw2102: command 0x0e transfer failed. [ 119.144473][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 119.144498][ T49] dw2102: command 0x0e transfer failed. [ 119.144508][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 119.144521][ T49] dw2102: command 0x0e transfer failed. [ 119.144531][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 119.144544][ T49] dw2102: command 0x51 transfer failed. [ 119.144554][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 119.144568][ T49] dw2102: i2c probe for address 0x68 failed. [ 119.144580][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 119.144593][ T49] dw2102: i2c probe for address 0x69 failed. [ 119.144605][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 119.144618][ T49] dw2102: i2c probe for address 0x6a failed. [ 119.144629][ T49] dw2102: probing for demodulator failed. Is the external power switched on? [ 119.144639][ T49] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 120.454736][ T49] rc_core: IR keymap rc-tt-1500 not found [ 120.454759][ T49] Registered IR keymap rc-empty [ 120.471490][ T49] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 120.564969][ T49] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 120.773916][ T49] dvb-usb: schedule remote query interval to 250 msecs. [ 120.773935][ T49] dw2102: su3000_power_ctrl: 0, initialized 1 [ 120.773943][ T49] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 120.822282][ T49] usb 2-1: USB disconnect, device number 2 [ 121.732703][ T49] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 124.279245][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.691039][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.905427][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.808102][ T37] audit: type=1326 audit(1757300074.239:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915196ebe9 code=0x7ffc0000 [ 125.808164][ T37] audit: type=1326 audit(1757300074.239:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915196ebe9 code=0x7ffc0000 [ 125.911697][ T37] audit: type=1326 audit(1757300074.339:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f915196ebe9 code=0x7ffc0000 [ 125.911761][ T37] audit: type=1326 audit(1757300074.339:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915196ebe9 code=0x7ffc0000 [ 125.911809][ T37] audit: type=1326 audit(1757300074.339:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915196ebe9 code=0x7ffc0000 [ 130.455404][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 130.455420][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.56'. [ 130.499792][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 130.499821][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 131.091698][ T6153] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.189662][ T6178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.764158][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 136.367945][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.534450][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 136.537212][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.540351][ T5926] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 136.540369][ T5926] usb 4-1: config 4 has no interface number 0 [ 136.540389][ T5926] usb 4-1: config 4 interface 30 has no altsetting 0 [ 136.557421][ T5926] usb 4-1: string descriptor 0 read error: -22 [ 136.557621][ T5926] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 136.557644][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.772695][ T5926] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 136.772749][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 136.772769][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 136.791408][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.809461][ T5926] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 136.809535][ T5926] usb 4-1: media controller created [ 136.811428][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 136.811457][ T5926] dw2102: i2c transfer failed. [ 136.811475][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 136.811488][ T5926] dw2102: i2c transfer failed. [ 136.811504][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 136.811516][ T5926] dw2102: i2c transfer failed. [ 136.811532][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 136.811545][ T5926] dw2102: i2c transfer failed. [ 136.811560][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 136.811573][ T5926] dw2102: i2c transfer failed. [ 136.811589][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 136.811601][ T5926] dw2102: i2c transfer failed. [ 136.811611][ T5926] dvb-usb: MAC address: 02:02:02:02:02:02 [ 137.153233][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.312170][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 137.366166][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 137.366192][ T5926] dw2102: command 0x0e transfer failed. [ 137.366210][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 137.366225][ T5926] dw2102: command 0x0e transfer failed. [ 137.698310][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 137.698338][ T5926] dw2102: command 0x0e transfer failed. [ 137.698348][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 137.698363][ T5926] dw2102: command 0x0e transfer failed. [ 137.698373][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 137.698387][ T5926] dw2102: command 0x51 transfer failed. [ 137.698396][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 137.698411][ T5926] dw2102: i2c probe for address 0x68 failed. [ 137.698423][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 137.698446][ T5926] dw2102: i2c probe for address 0x69 failed. [ 137.698459][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 137.698473][ T5926] dw2102: i2c probe for address 0x6a failed. [ 137.698482][ T5926] dw2102: probing for demodulator failed. Is the external power switched on? [ 137.698493][ T5926] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 138.437943][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.438058][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.754429][ T5926] rc_core: IR keymap rc-tt-1500 not found [ 138.754454][ T5926] Registered IR keymap rc-empty [ 139.070023][ T5926] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 139.088850][ T5926] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 139.113964][ T5926] dvb-usb: schedule remote query interval to 250 msecs. [ 139.113983][ T5926] dw2102: su3000_power_ctrl: 0, initialized 1 [ 139.113991][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 139.162752][ T5926] usb 4-1: USB disconnect, device number 2 [ 139.277861][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 139.277888][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.81'. [ 139.798733][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 140.749658][ T6249] syz.3.86 uses obsolete (PF_INET,SOCK_PACKET) [ 144.885041][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 144.928990][ T6275] syz_tun: entered promiscuous mode [ 145.637637][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 145.637663][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.96'. [ 151.480092][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 152.112646][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 152.112686][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 152.280970][ T6347] team0: entered promiscuous mode [ 152.280995][ T6347] team_slave_0: entered promiscuous mode [ 152.281296][ T6347] team_slave_1: entered promiscuous mode [ 152.304660][ T6347] bridge0: entered promiscuous mode [ 152.821632][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 154.841044][ T6375] netlink: 104 bytes leftover after parsing attributes in process `syz.2.121'. [ 155.354627][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 155.931810][ T6382] lo: entered allmulticast mode [ 156.783911][ T6379] lo: left allmulticast mode [ 157.774420][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.977349][ T9] usb 4-1: config 0 has no interfaces? [ 158.013340][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.013361][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.013373][ T9] usb 4-1: Product: syz [ 158.013382][ T9] usb 4-1: Manufacturer: syz [ 158.013390][ T9] usb 4-1: SerialNumber: syz [ 158.106017][ T9] usb 4-1: config 0 descriptor?? [ 158.339051][ T9] usb 4-1: USB disconnect, device number 3 [ 158.470552][ T6392] loop8: detected capacity change from 0 to 16384 [ 158.797841][ C1] I/O error, dev loop8, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.799044][ C1] I/O error, dev loop8, sector 16376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.799194][ C1] Buffer I/O error on dev loop8, logical block 2047, async page read [ 158.815788][ T6394] loop8: detected capacity change from 16384 to 0 [ 158.818937][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 160.184750][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 161.654548][ T49] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 161.868815][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.868835][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.869869][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 161.869887][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.869900][ T49] usb 4-1: SerialNumber: syz [ 162.029003][ T49] usb 4-1: 0:2 : does not exist [ 162.447515][ T49] usb 4-1: USB disconnect, device number 4 [ 175.023091][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.164787][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.929070][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 176.263321][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.285855][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.832651][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.846113][ T31] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 176.846215][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.979265][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.994936][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.133668][ T31] usb 1-1: config 0 descriptor?? [ 177.267442][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.645947][ T31] nintendo 0003:057E:200E.0001: unbalanced delimiter at end of report description [ 177.652618][ T31] nintendo 0003:057E:200E.0001: HID parse failed [ 177.690006][ T31] nintendo 0003:057E:200E.0001: probe - fail = -22 [ 177.690145][ T31] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -22 [ 177.834818][ T5166] usb 1-1: USB disconnect, device number 2 [ 179.611498][ T6558] capability: warning: `syz.4.178' uses deprecated v2 capabilities in a way that may be insecure [ 180.084541][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 180.214437][ T5914] usb 5-1: device descriptor read/64, error -71 [ 180.494412][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 180.633269][ T5914] usb 5-1: device descriptor read/64, error -71 [ 180.748065][ T5914] usb usb5-port1: attempt power cycle [ 181.134438][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.166387][ T5914] usb 5-1: device descriptor read/8, error -71 [ 181.408960][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.428020][ T5914] usb 5-1: device descriptor read/8, error -71 [ 181.545176][ T5914] usb usb5-port1: unable to enumerate USB device [ 181.684463][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.854614][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 181.883411][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.892932][ T49] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 181.892976][ T49] usb 3-1: can't read configurations, error -71 [ 183.594582][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 184.301562][ T49] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.301868][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 184.434425][ T49] usb 1-1: device descriptor read/64, error -32 [ 184.502205][ T6605] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 184.704678][ T49] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.871278][ T49] usb 1-1: config 0 has no interfaces? [ 185.131701][ T49] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.131735][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.131755][ T49] usb 1-1: Product: syz [ 185.131770][ T49] usb 1-1: Manufacturer: syz [ 185.131784][ T49] usb 1-1: SerialNumber: syz [ 186.115418][ T49] usb 1-1: config 0 descriptor?? [ 187.444402][ T5929] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 187.611780][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 187.829968][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.831854][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 187.831884][ T5929] usb 5-1: can't read configurations, error -71 [ 188.383398][ T37] audit: type=1326 audit(1757300136.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 188.383461][ T37] audit: type=1326 audit(1757300136.799:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 188.383509][ T37] audit: type=1326 audit(1757300136.799:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 188.383566][ T37] audit: type=1326 audit(1757300136.799:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 188.383610][ T37] audit: type=1326 audit(1757300136.799:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 188.383657][ T37] audit: type=1326 audit(1757300136.799:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 188.383702][ T37] audit: type=1326 audit(1757300136.869:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 190.514438][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.670349][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.670371][ T5911] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 190.670386][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.670399][ T5911] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 190.670412][ T5911] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.728791][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.728825][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.728846][ T5911] usb 3-1: Product: syz [ 190.728856][ T5911] usb 3-1: Manufacturer: syz [ 190.728864][ T5911] usb 3-1: SerialNumber: syz [ 191.341796][ T49] usb 1-1: can't set config #0, error -110 [ 191.573130][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.734713][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 191.737129][ T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 191.737149][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.790148][ T31] usb 2-1: config 0 descriptor?? [ 192.045170][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 192.248749][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 192.249015][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 192.277783][ T31] asix 2-1:0.0: probe with driver asix failed with error -32 [ 192.703092][ T5929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 193.137537][ T5911] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 193.180614][ T5911] usb 3-1: USB disconnect, device number 4 [ 193.946659][ T6647] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 195.488861][ T5166] usb 2-1: USB disconnect, device number 3 [ 197.696627][ T5166] usb 1-1: USB disconnect, device number 4 [ 197.904681][ T5929] usb 5-1: device descriptor read/64, error -110 [ 198.154509][ T5929] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.278472][ T37] audit: type=1326 audit(1757300146.759:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 198.278533][ T37] audit: type=1326 audit(1757300146.769:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 198.278579][ T37] audit: type=1326 audit(1757300146.769:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 198.284596][ T5929] usb 5-1: device descriptor read/64, error -32 [ 198.374392][ T49] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 198.394636][ T5929] usb usb5-port1: attempt power cycle [ 198.534385][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 198.589473][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.590517][ T49] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.590544][ T49] usb 2-1: can't read configurations, error -71 [ 198.754469][ T5929] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.776208][ T5929] usb 5-1: device descriptor read/8, error -32 [ 198.957389][ T5929] raw-gadget.2 gadget.4: failed to queue suspend event [ 198.982873][ T5929] raw-gadget.2 gadget.4: failed to queue reset event [ 199.775294][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.775384][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.964534][ T5929] raw-gadget.2 gadget.4: failed to queue resume event [ 199.967247][ T6630] raw-gadget.2 gadget.4: failed to queue suspend event [ 199.967307][ T6630] raw-gadget.2 gadget.4: failed to queue disconnect event [ 200.024413][ T5929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.234524][ T5929] usb 5-1: device not accepting address 11, error -71 [ 200.235014][ T5929] usb usb5-port1: unable to enumerate USB device [ 200.794947][ T6684] netlink: 'syz.2.221': attribute type 4 has an invalid length. [ 200.795019][ T6684] netlink: 17 bytes leftover after parsing attributes in process `syz.2.221'. [ 202.985575][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.991183][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.995444][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.107891][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.189106][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.580376][ T5847] Bluetooth: hci0: command tx timeout [ 207.455395][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 208.604917][ T5847] Bluetooth: hci0: command tx timeout [ 208.674421][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 208.825070][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 208.829769][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.831658][ T5929] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 208.831685][ T5929] usb 4-1: config 4 has no interface number 0 [ 208.831721][ T5929] usb 4-1: config 4 interface 30 has no altsetting 0 [ 208.893806][ T5929] usb 4-1: string descriptor 0 read error: -22 [ 208.893988][ T5929] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 208.894015][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.958494][ T5929] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 208.958548][ T5929] dw2102: su3000_power_ctrl: 1, initialized 0 [ 208.958569][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 208.986481][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.987217][ T5929] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 208.987255][ T5929] usb 4-1: media controller created [ 208.987273][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 208.987282][ T5929] dw2102: i2c transfer failed. [ 208.987293][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 208.987301][ T5929] dw2102: i2c transfer failed. [ 208.987311][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 208.987319][ T5929] dw2102: i2c transfer failed. [ 208.987333][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 208.987340][ T5929] dw2102: i2c transfer failed. [ 208.987350][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 208.987358][ T5929] dw2102: i2c transfer failed. [ 208.987367][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 208.987375][ T5929] dw2102: i2c transfer failed. [ 208.987380][ T5929] dvb-usb: MAC address: 02:02:02:02:02:02 [ 209.108397][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.225404][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 209.225429][ T5929] dw2102: command 0x0e transfer failed. [ 209.225439][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 209.225454][ T5929] dw2102: command 0x0e transfer failed. [ 209.534454][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 209.534480][ T5929] dw2102: command 0x0e transfer failed. [ 209.534491][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 209.534505][ T5929] dw2102: command 0x0e transfer failed. [ 209.534514][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 209.534528][ T5929] dw2102: command 0x51 transfer failed. [ 209.534536][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 209.534550][ T5929] dw2102: i2c probe for address 0x68 failed. [ 209.534562][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 209.534575][ T5929] dw2102: i2c probe for address 0x69 failed. [ 209.534587][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 209.534600][ T5929] dw2102: i2c probe for address 0x6a failed. [ 209.534612][ T5929] dw2102: probing for demodulator failed. Is the external power switched on? [ 209.534622][ T5929] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 210.696012][ T5847] Bluetooth: hci0: command tx timeout [ 212.027476][ T5929] rc_core: IR keymap rc-tt-1500 not found [ 212.027498][ T5929] Registered IR keymap rc-empty [ 212.032895][ T5929] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 212.083975][ T5929] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 212.113851][ T5929] dvb-usb: schedule remote query interval to 250 msecs. [ 212.113876][ T5929] dw2102: su3000_power_ctrl: 0, initialized 1 [ 212.113889][ T5929] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 212.156499][ T5929] usb 4-1: USB disconnect, device number 5 [ 212.287088][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 212.511997][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.771369][ T5836] Bluetooth: hci0: command tx timeout [ 213.327923][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.706618][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.330376][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.946735][ T5929] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 215.314642][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.423157][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.557546][ T6760] netlink: 220 bytes leftover after parsing attributes in process `syz.1.239'. [ 215.815597][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.701125][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.094386][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 217.094468][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 217.094528][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 217.094554][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 217.504443][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.894637][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.894809][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.895069][ T6700] bridge_slave_0: entered allmulticast mode [ 217.900331][ T6700] bridge_slave_0: entered promiscuous mode [ 217.906695][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.907075][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.907298][ T6700] bridge_slave_1: entered allmulticast mode [ 217.910094][ T6700] bridge_slave_1: entered promiscuous mode [ 218.013729][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.654416][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 218.657974][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.659401][ T10] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 218.659438][ T10] usb 2-1: config 4 has no interface number 0 [ 218.659475][ T10] usb 2-1: config 4 interface 30 has no altsetting 0 [ 218.667587][ T10] usb 2-1: string descriptor 0 read error: -22 [ 218.667768][ T10] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 218.667794][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.799491][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.873934][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 218.873993][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 218.874013][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 218.917182][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.919700][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 218.919766][ T10] usb 2-1: media controller created [ 218.919794][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 218.919810][ T10] dw2102: i2c transfer failed. [ 218.919830][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 218.919845][ T10] dw2102: i2c transfer failed. [ 218.919864][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 218.919878][ T10] dw2102: i2c transfer failed. [ 218.919897][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 218.919911][ T10] dw2102: i2c transfer failed. [ 218.919930][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 218.919944][ T10] dw2102: i2c transfer failed. [ 218.919963][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 218.919977][ T10] dw2102: i2c transfer failed. [ 218.919988][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 218.984543][ T5166] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 219.078398][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.122466][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 219.122491][ T10] dw2102: command 0x0e transfer failed. [ 219.122501][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 219.122516][ T10] dw2102: command 0x0e transfer failed. [ 219.184362][ T5166] usb 4-1: Using ep0 maxpacket: 8 [ 219.189302][ T5166] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 219.189336][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.219923][ T5166] usb 4-1: config 0 descriptor?? [ 219.325675][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.339903][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.424387][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 219.424414][ T10] dw2102: command 0x0e transfer failed. [ 219.424425][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 219.424439][ T10] dw2102: command 0x0e transfer failed. [ 219.424449][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 219.425654][ T10] dw2102: command 0x51 transfer failed. [ 219.425669][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 219.425685][ T10] dw2102: i2c probe for address 0x68 failed. [ 219.425697][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 219.425711][ T10] dw2102: i2c probe for address 0x69 failed. [ 219.425723][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 219.425737][ T10] dw2102: i2c probe for address 0x6a failed. [ 219.425984][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 219.425997][ T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 219.504421][ T5166] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 219.635546][ T10] rc_core: IR keymap rc-tt-1500 not found [ 219.635570][ T10] Registered IR keymap rc-empty [ 219.666406][ T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 219.723195][ T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 219.807857][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 219.807883][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 219.807897][ T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 219.865308][ T10] usb 2-1: USB disconnect, device number 6 [ 219.882334][ T6700] team0: Port device team_slave_0 added [ 219.954104][ T6700] team0: Port device team_slave_1 added [ 220.292285][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 220.527148][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.527167][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.527195][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.647376][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.647394][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.647418][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.661651][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.705317][ T5166] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.705640][ T5166] asix 4-1:0.0: probe with driver asix failed with error -71 [ 220.707011][ T6794] random: crng reseeded on system resumption [ 220.745005][ T5166] usb 4-1: USB disconnect, device number 6 [ 220.925969][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 220.926007][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 220.931113][ T10] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 220.931144][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.931164][ T10] usb 2-1: Product: syz [ 220.931179][ T10] usb 2-1: Manufacturer: syz [ 220.931194][ T10] usb 2-1: SerialNumber: syz [ 220.992353][ T10] usb 2-1: config 0 descriptor?? [ 220.993272][ T6792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.995781][ T6792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.197638][ T6792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.197801][ T6792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.271821][ T6700] hsr_slave_0: entered promiscuous mode [ 221.295332][ T6700] hsr_slave_1: entered promiscuous mode [ 221.296476][ T6700] debugfs: 'hsr0' already exists in 'hsr' [ 221.296504][ T6700] Cannot create hsr debugfs directory [ 221.992245][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.539951][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.595576][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.777693][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.811552][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.565869][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.327056][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.552107][ T10] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 224.975677][ T10] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 224.992419][ T10] usb 2-1: USB disconnect, device number 7 [ 225.018341][ T10] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 226.851329][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.133280][ T6843] netlink: 64 bytes leftover after parsing attributes in process `syz.1.268'. [ 227.163442][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.920445][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.599700][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.334270][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.383252][ T6700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.638809][ T6700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.776811][ T6700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.831868][ T6700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.424013][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.472665][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.640662][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.781747][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.782096][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.823228][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.824515][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.039941][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.604654][ T6887] tipc: Started in network mode [ 235.604693][ T6887] tipc: Node identity 7ad06317aa02, cluster identity 4711 [ 235.605612][ T6887] tipc: Enabled bearer , priority 0 [ 236.366399][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.578062][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.655032][ T9] tipc: Node number set to 3503448855 [ 236.757582][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.268135][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.325645][ T6882] tipc: Disabling bearer [ 238.135983][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.183334][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.913407][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.924420][ T5929] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 241.085195][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 241.383627][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.383665][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.383711][ T5929] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 241.383736][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.450486][ T5929] usb 5-1: config 0 descriptor?? [ 241.543412][ T6700] veth0_vlan: entered promiscuous mode [ 241.711864][ T6700] veth1_vlan: entered promiscuous mode [ 241.843049][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.928643][ T5929] hid-led 0003:27B8:01ED.0002: item fetching failed at offset 0/2 [ 241.929738][ T5929] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -22 [ 242.125821][ T5929] usb 5-1: USB disconnect, device number 12 [ 242.134895][ T6700] veth0_macvtap: entered promiscuous mode [ 242.196486][ T6700] veth1_macvtap: entered promiscuous mode [ 242.315746][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.360907][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.424758][ T3179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.425077][ T3179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.425370][ T3179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.425411][ T3179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.305520][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.342165][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.734496][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.339204][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.641777][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.837502][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.882007][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.943154][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.352460][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.481325][ T37] audit: type=1326 audit(1757300194.939:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 246.481389][ T37] audit: type=1326 audit(1757300194.939:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.480270][ T37] audit: type=1326 audit(1757300195.499:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.480337][ T37] audit: type=1326 audit(1757300195.499:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.480386][ T37] audit: type=1326 audit(1757300195.499:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.480434][ T37] audit: type=1326 audit(1757300195.909:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.784285][ T37] audit: type=1326 audit(1757300196.179:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.784350][ T37] audit: type=1326 audit(1757300196.179:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6269febe9 code=0x7ffc0000 [ 247.798826][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.968433][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.727560][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.795732][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.028744][ T37] audit: type=1326 audit(1757300199.519:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ddb5ebe9 code=0x7ffc0000 [ 251.028805][ T37] audit: type=1326 audit(1757300199.519:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ddb5ebe9 code=0x7ffc0000 [ 251.136290][ T6131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.251084][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.251109][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.501754][ T5849] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 251.657684][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.657722][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.657766][ T5849] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 251.657792][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.787828][ T5849] usb 3-1: config 0 descriptor?? [ 252.586351][ T7013] block device autoloading is deprecated and will be removed. [ 252.973351][ T5849] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x3 [ 253.344087][ T5849] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 253.349866][ T5849] usb 3-1: USB disconnect, device number 5 [ 253.381976][ T6131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.699742][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.264333][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 254.264611][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 254.394416][ T5911] usb 2-1: device descriptor read/64, error -32 [ 254.602160][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.644395][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.644701][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 254.694567][ T7031] binder: 7030:7031 ioctl 4018620d 0 returned -22 [ 254.798247][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.798272][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.055871][ T5911] usb 2-1: device descriptor read/64, error -32 [ 255.270045][ T5911] usb usb2-port1: attempt power cycle [ 255.640236][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.010311][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.344561][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 256.378798][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.544264][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.598215][ T5911] usb 2-1: device descriptor read/8, error -71 [ 257.046226][ T1102] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.050363][ T1102] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.050470][ T1102] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.050560][ T1102] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.050647][ T1102] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.050734][ T1102] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.203899][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.223787][ T6131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.475871][ T7056] capability: warning: `syz.3.328' uses 32-bit capabilities (legacy support in use) [ 257.485406][ T7056] syz.3.328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 258.927817][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.075239][ T7063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.331'. [ 261.107194][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.107293][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.469283][ T6131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.755889][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.791705][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.793219][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.805745][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.806833][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 265.884590][ T5842] Bluetooth: hci5: command tx timeout [ 268.587843][ T5842] Bluetooth: hci5: command tx timeout [ 268.980191][ T6131] bridge_slave_1: left allmulticast mode [ 268.980623][ T6131] bridge_slave_1: left promiscuous mode [ 268.982961][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.985644][ T6131] bridge_slave_0: left allmulticast mode [ 269.985671][ T6131] bridge_slave_0: left promiscuous mode [ 269.985915][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.606175][ T59] Bluetooth: hci5: command tx timeout [ 270.715690][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 270.936508][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.936539][ T31] usb 5-1: config 0 has no interface number 0 [ 270.936643][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.936660][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.936684][ T31] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 270.936698][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.025378][ T31] usb 5-1: config 0 descriptor?? [ 271.555268][ T31] usbhid 5-1:0.1: can't add hid device: -71 [ 271.555416][ T31] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 271.721914][ T31] usb 5-1: USB disconnect, device number 13 [ 272.169251][ T7136] syz.4.352 (7136) used greatest stack depth: 17464 bytes left [ 272.686235][ T59] Bluetooth: hci5: command tx timeout [ 273.678478][ T7155] ======================================================= [ 273.678478][ T7155] WARNING: The mand mount option has been deprecated and [ 273.678478][ T7155] and is ignored by this kernel. Remove the mand [ 273.678478][ T7155] option from the mount to silence this warning. [ 273.678478][ T7155] ======================================================= [ 273.678557][ T7155] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 273.678579][ T7155] CIFS mount error: No usable UNC path provided in device string! [ 273.678579][ T7155] [ 273.678763][ T7155] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 287.239265][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 287.239285][ T37] audit: type=1326 audit(1757300235.729:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.240516][ T37] audit: type=1326 audit(1757300235.729:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.246699][ T37] audit: type=1326 audit(1757300235.739:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.251750][ T37] audit: type=1326 audit(1757300235.739:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.251803][ T37] audit: type=1326 audit(1757300235.739:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.252061][ T37] audit: type=1326 audit(1757300235.739:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.252455][ T37] audit: type=1326 audit(1757300235.739:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.252722][ T37] audit: type=1326 audit(1757300235.739:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.253042][ T37] audit: type=1326 audit(1757300235.739:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.253293][ T37] audit: type=1326 audit(1757300235.739:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f151a38ebe9 code=0x7ffc0000 [ 287.695237][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.903500][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.001873][ T6131] bond0 (unregistering): Released all slaves [ 292.280254][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 292.280292][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 292.797711][ T7258] team0: entered promiscuous mode [ 292.797728][ T7258] team_slave_0: entered promiscuous mode [ 292.797890][ T7258] team_slave_1: entered promiscuous mode [ 292.835301][ T7258] ip6gretap0: entered promiscuous mode [ 292.837120][ T7258] debugfs: 'hsr1' already exists in 'hsr' [ 292.837168][ T7258] Cannot create hsr debugfs directory [ 293.809976][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 294.103621][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 294.103649][ T7279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.396'. [ 294.294405][ T6131] hsr_slave_0: left promiscuous mode [ 294.334575][ T6131] hsr_slave_1: left promiscuous mode [ 294.338291][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.338401][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.426268][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.426302][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.687058][ T6131] veth1_macvtap: left promiscuous mode [ 294.687275][ T6131] veth0_macvtap: left promiscuous mode [ 294.691918][ T6131] veth1_vlan: left promiscuous mode [ 294.692272][ T6131] veth0_vlan: left promiscuous mode [ 302.328316][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 302.615238][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 308.131302][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.158835][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.159118][ T7075] bridge_slave_0: entered allmulticast mode [ 308.232240][ T7075] bridge_slave_0: entered promiscuous mode [ 308.344576][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.344740][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.345001][ T7075] bridge_slave_1: entered allmulticast mode [ 308.371290][ T7075] bridge_slave_1: entered promiscuous mode [ 308.464802][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.584643][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.419'. [ 308.584668][ T7370] netlink: 44 bytes leftover after parsing attributes in process `syz.4.419'. [ 309.545042][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.640327][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.628009][ T7394] tun0: tun_chr_ioctl cmd 1074025675 [ 311.628037][ T7394] tun0: persist enabled [ 312.240116][ T7075] team0: Port device team_slave_0 added [ 312.261703][ T7075] team0: Port device team_slave_1 added [ 312.890307][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.430'. [ 312.890332][ T7413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.430'. [ 312.947881][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.947900][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.947929][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.010101][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.010120][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.010150][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.027519][ T7075] hsr_slave_0: entered promiscuous mode [ 314.029152][ T7075] hsr_slave_1: entered promiscuous mode [ 314.030335][ T7075] debugfs: 'hsr0' already exists in 'hsr' [ 314.030363][ T7075] Cannot create hsr debugfs directory [ 314.392361][ T6131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.416870][ T7450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 316.416896][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.440'. [ 316.630005][ T7453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.436'. [ 318.210032][ T6131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.284573][ T5166] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 318.444894][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 318.489412][ T5166] usb 5-1: unable to get BOS descriptor or descriptor too short [ 318.492497][ T5166] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 318.492526][ T5166] usb 5-1: config 4 has no interface number 0 [ 318.492562][ T5166] usb 5-1: config 4 interface 30 has no altsetting 0 [ 318.528621][ T5166] usb 5-1: string descriptor 0 read error: -22 [ 318.528916][ T5166] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 318.528942][ T5166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.596349][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 318.622402][ T5166] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 318.622460][ T5166] dw2102: su3000_power_ctrl: 1, initialized 0 [ 318.622480][ T5166] dvb-usb: bulk message failed: -22 (2/0) [ 318.661022][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 318.667638][ T5166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.668778][ T5166] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 318.668832][ T5166] usb 5-1: media controller created [ 318.668858][ T5166] dvb-usb: bulk message failed: -22 (6/0) [ 318.668872][ T5166] dw2102: i2c transfer failed. [ 318.668889][ T5166] dvb-usb: bulk message failed: -22 (6/0) [ 318.668902][ T5166] dw2102: i2c transfer failed. [ 318.668919][ T5166] dvb-usb: bulk message failed: -22 (6/0) [ 318.668931][ T5166] dw2102: i2c transfer failed. [ 318.668948][ T5166] dvb-usb: bulk message failed: -22 (6/0) [ 318.668960][ T5166] dw2102: i2c transfer failed. [ 318.668976][ T5166] dvb-usb: bulk message failed: -22 (6/0) [ 318.668989][ T5166] dw2102: i2c transfer failed. [ 318.669005][ T5166] dvb-usb: bulk message failed: -22 (6/0) [ 318.669017][ T5166] dw2102: i2c transfer failed. [ 318.669026][ T5166] dvb-usb: MAC address: 02:02:02:02:02:02 [ 318.850982][ T7461] dvb-usb: bulk message failed: -22 (1/0) [ 318.851006][ [ 318.851006][ T7461] dw2102: i2c transfer failed. [ 318.851042][ T7461] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 318.851062][ T7461] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 318.851084][ T7461] CPU: 0 UID: 0 PID: 7461 Comm: syz.4.442 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 318.851109][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.851123][ T7461] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 318.851154][ T7461] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ea 7b b9 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 318.851173][ T7461] RSP: 0018:ffffc900041b7aa8 EFLAGS: 00010202 [ 318.851194][ T7461] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 2a347803f9202f00 [ 318.851209][ T7461] RDX: ffffc9000e7ed000 RSI: 00000000000005e7 RDI: 00000000000005e8 [ 318.851224][ T7461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.851237][ T7461] R10: dffffc0000000000 R11: ffffed1017104863 R12: 0000000000000001 [ 318.851252][ T7461] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880246e8148 [ 318.851268][ T7461] FS: 00007f914fbd66c0(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 318.851299][ T7461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.851314][ T7461] CR2: 0000001b31823ffc CR3: 0000000052356000 CR4: 00000000003526f0 [ 318.851334][ T7461] Call Trace: [ 318.851342][ T7461] [ 318.851359][ T7461] __i2c_transfer+0x871/0x2170 [ 318.851396][ T7461] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.851434][ T7461] ? __pfx___i2c_transfer+0x10/0x10 [ 318.851467][ T7461] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 318.851489][ T7461] ? i2c_transfer+0x120/0x3a0 [ 318.851522][ T7461] i2c_transfer+0x25b/0x3a0 [ 318.851555][ T7461] ? __pfx_i2c_transfer+0x10/0x10 [ 318.851589][ T7461] ? _copy_from_user+0x94/0xb0 [ 318.851618][ T7461] i2cdev_ioctl_rdwr+0x460/0x740 [ 318.851656][ T7461] i2cdev_ioctl+0x64e/0x800 [ 318.851688][ T7461] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 318.851722][ T7461] ? __fget_files+0x3a6/0x420 [ 318.851752][ T7461] ? __fget_files+0x2a/0x420 [ 318.851784][ T7461] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.851809][ T7461] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 318.851841][ T7461] __se_sys_ioctl+0xfc/0x170 [ 318.851867][ T7461] do_syscall_64+0xfa/0x3b0 [ 318.851885][ T7461] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.851916][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.851938][ T7461] ? clear_bhb_loop+0x60/0xb0 [ 318.851962][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.851983][ T7461] RIP: 0033:0x7f915196ebe9 [ 318.852001][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.852019][ T7461] RSP: 002b:00007f914fbd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.852046][ T7461] RAX: ffffffffffffffda RBX: 00007f9151ba5fa0 RCX: 00007f915196ebe9 [ 318.852062][ T7461] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 318.852077][ T7461] RBP: 00007f91519f1e19 R08: 0000000000000000 R09: 0000000000000000 [ 318.852091][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.852104][ T7461] R13: 00007f9151ba6038 R14: 00007f9151ba5fa0 R15: 00007ffeae94e438 [ 318.852128][ T7461] [ 318.852135][ T7461] Modules linked in: [ 318.852167][ T7461] ---[ end trace 0000000000000000 ]--- [ 318.860950][ T7461] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 318.860984][ T7461] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ea 7b b9 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 318.861000][ T7461] RSP: 0018:ffffc900041b7aa8 EFLAGS: 00010202 [ 318.861019][ T7461] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 2a347803f9202f00 [ 318.861033][ T7461] RDX: ffffc9000e7ed000 RSI: 00000000000005e7 RDI: 00000000000005e8 [ 318.861046][ T7461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.861058][ T7461] R10: dffffc0000000000 R11: ffffed1017104863 R12: 0000000000000001 [ 318.861072][ T7461] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880246e8148 [ 318.861086][ T7461] FS: 00007f914fbd66c0(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 318.861103][ T7461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.861116][ T7461] CR2: 00007fd624801d58 CR3: 0000000052356000 CR4: 00000000003526f0 [ 318.861138][ T7461] Kernel panic - not syncing: Fatal exception [ 318.861507][ T7461] Kernel Offset: disabled