last executing test programs: 15.813718464s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x1, 0x4, "e32c36c6"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000803"], 0x0, 0x0}) 15.423347457s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe60, 0x2, [@TCA_FW_ACT={0xe5c, 0x4, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0x9568}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x20004, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0x2e, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x7, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 15.302768723s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000600)={0x0, 0x2, 0x0, 0xfffffff8, 0x4, 0x6}, &(0x7f0000000680)=0x14) fremovexattr(r5, &(0x7f0000000140)=@known='system.posix_acl_default\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x459, 0x10, r8, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x22) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r11, 0x402, 0x40000029) fcntl$notify(r10, 0x402, 0x1c) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r12, 0xffffffffffffffff, 0x0) 14.716926469s ago: executing program 2 (id=3): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) sendmsg$nl_generic(r0, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 14.040619662s ago: executing program 1 (id=6): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB]) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x4c, r6, 0x101, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x2, 0x0, 0x0, {0xfffffffffffffff8, 0x5, 0x0, 0x31f, 0x0, 0x0, 0x0, 0x2}, 0x6, 0x5, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x24, r9, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa2000000000d0c8be48fe7e2ba387701000007020000f8ffffffb703000808000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000010fafb270000040000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x101000, 0x1) poll(&(0x7f0000000140)=[{r4, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) 12.638294986s ago: executing program 2 (id=7): r0 = socket(0x10, 0x3, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffc6e) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000040)='./file0\x00') openat2(r7, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0xc20002, 0x2, 0xb059184e4dd77197}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000000600070008000000080008800407000008000500", @ANYRES32=r8], 0x30}}, 0x0) 12.404615928s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0xb02a2000) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x2) 11.271873166s ago: executing program 0 (id=10): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.642358951s ago: executing program 0 (id=12): unshare(0x2c020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 8.159700875s ago: executing program 4 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdc03, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x24}}, 0x4044000) 8.120082671s ago: executing program 0 (id=15): r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x6, 0x0, 0x0, 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x50, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x80) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x40000002}) 6.95281866s ago: executing program 4 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000084}, 0x4040000) 6.440112976s ago: executing program 4 (id=17): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xd, @pix_mp={0x2, 0xd, 0x20493859, 0x7, 0x9, [{0x7, 0x6}, {0x0, 0x8}, {0xa0, 0x1}, {0x80000000, 0x1}, {0xdf, 0x3}, {0x5, 0x3}, {0xa, 0x3}, {0xa, 0x1000}], 0x4, 0x9f, 0x8, 0x0, 0x3}}) 6.101722092s ago: executing program 0 (id=18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 5.660557548s ago: executing program 4 (id=19): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="9c493cef34ecdb199375c64fcec2074d0c1c0b900f227cafdb4ec8a1023f330956c8ab1389d63f46e9134c548db5543775250a7516272f169a3678d6b4f22b7f6fb08d5aee7569da7a203ade9dd8cb8f767294f693788bb190765a5751ea9e5413dd658804d722026df94cfb2d4d2399addf539af5fb59ecf0d37643195f0b6186bd46016fb5b531b37ce3e3432b5b5c058af5bf54c71d64467fdbe1abe6d2c4113e4f9755694e52421ba5ef8b3b63232c37b42d613a999df93059df5f228965d715fe7110cee04d720249a1dab54971354f59e0bc755ce64a5ba48cbeb2de45fd47f8edfeb6db833facd3b8824b90bb30f64ba2b5b892e2bce7146b4447abdd7931696ee15195313b9366d0121dcc744ac9d3c5cedc571d934fa1fb2eb14e5e999678e72dc30e32a4275c09eca2433c3c59b58598ceffd730f715bcef923b66a4616150aed9293d694b810fc404a593a15322e732597db479193015409875f52c172f7b832ab6ef543be3a82f1ad69ae5c2ccb4369940012b3e893a4c", 0x17d}], 0x1}}], 0x1, 0x4000840) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.642095875s ago: executing program 4 (id=20): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) syz_extract_tcp_res(0x0, 0x7, 0x6cc02cf3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x24, {0x8e1}}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) 2.386585604s ago: executing program 3 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) 2.119636017s ago: executing program 1 (id=22): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x101000, 0x20, 0x28}, 0x18) ioctl$KVM_RUN(r8, 0xae80, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 1.5824342s ago: executing program 4 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x3, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 1.141583492s ago: executing program 3 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=25): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x805}, 0xc894) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 207.148370][ T5787] cgroup: Unknown subsys name 'net' [ 207.267826][ T5787] cgroup: Unknown subsys name 'cpuset' [ 207.284844][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 214.455347][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.383908][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.393232][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.407759][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.417038][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.428876][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.437220][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.453050][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.465424][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.469737][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.483542][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.495339][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.505455][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.519460][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.535808][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.548289][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.594958][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.613897][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.624084][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.633097][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.654600][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.663387][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.676151][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.685065][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.714633][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.735545][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.144336][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 221.687967][ T5807] Bluetooth: hci0: command tx timeout [ 221.691895][ T5104] Bluetooth: hci3: command tx timeout [ 221.693912][ T5805] Bluetooth: hci1: command tx timeout [ 221.801893][ T5805] Bluetooth: hci4: command tx timeout [ 221.808034][ T5807] Bluetooth: hci2: command tx timeout [ 222.121439][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 222.301530][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 222.550001][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.557941][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.568266][ T5810] bridge_slave_0: entered allmulticast mode [ 222.578911][ T5810] bridge_slave_0: entered promiscuous mode [ 222.644649][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 222.669300][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.677349][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.685434][ T5810] bridge_slave_1: entered allmulticast mode [ 222.697064][ T5810] bridge_slave_1: entered promiscuous mode [ 222.711499][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 222.988718][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.128905][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.476030][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.485141][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.493363][ T5803] bridge_slave_0: entered allmulticast mode [ 223.503507][ T5803] bridge_slave_0: entered promiscuous mode [ 223.572007][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.580974][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.588853][ T5803] bridge_slave_1: entered allmulticast mode [ 223.599563][ T5803] bridge_slave_1: entered promiscuous mode [ 223.677155][ T5810] team0: Port device team_slave_0 added [ 223.729650][ T5807] Bluetooth: hci3: command tx timeout [ 223.736889][ T5805] Bluetooth: hci1: command tx timeout [ 223.736949][ T5104] Bluetooth: hci0: command tx timeout [ 223.768602][ T5810] team0: Port device team_slave_1 added [ 223.882171][ T5805] Bluetooth: hci2: command tx timeout [ 223.890070][ T5807] Bluetooth: hci4: command tx timeout [ 223.969067][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.979473][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.987626][ T5813] bridge_slave_0: entered allmulticast mode [ 223.997036][ T5813] bridge_slave_0: entered promiscuous mode [ 224.060050][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.165985][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.173952][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.181885][ T5813] bridge_slave_1: entered allmulticast mode [ 224.191198][ T5813] bridge_slave_1: entered promiscuous mode [ 224.254907][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.303152][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.310534][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.338003][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.383804][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.391680][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.399330][ T5804] bridge_slave_0: entered allmulticast mode [ 224.408805][ T5804] bridge_slave_0: entered promiscuous mode [ 224.459032][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.467569][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.475642][ T5817] bridge_slave_0: entered allmulticast mode [ 224.484785][ T5817] bridge_slave_0: entered promiscuous mode [ 224.498384][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.505726][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.532520][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.577616][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.585627][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.593912][ T5804] bridge_slave_1: entered allmulticast mode [ 224.603759][ T5804] bridge_slave_1: entered promiscuous mode [ 224.653352][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.662147][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.670983][ T5817] bridge_slave_1: entered allmulticast mode [ 224.679751][ T5817] bridge_slave_1: entered promiscuous mode [ 224.757087][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.823705][ T5803] team0: Port device team_slave_0 added [ 224.891548][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.948717][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.967619][ T5803] team0: Port device team_slave_1 added [ 225.032658][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.055610][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.208170][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.315922][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.323552][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.351492][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.452025][ T5813] team0: Port device team_slave_0 added [ 225.473700][ T5810] hsr_slave_0: entered promiscuous mode [ 225.483905][ T5810] hsr_slave_1: entered promiscuous mode [ 225.495701][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.503939][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.531255][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.575813][ T5804] team0: Port device team_slave_0 added [ 225.627923][ T5813] team0: Port device team_slave_1 added [ 225.648030][ T5804] team0: Port device team_slave_1 added [ 225.712112][ T5817] team0: Port device team_slave_0 added [ 225.802115][ T5805] Bluetooth: hci1: command tx timeout [ 225.808077][ T5807] Bluetooth: hci3: command tx timeout [ 225.813980][ T5807] Bluetooth: hci0: command tx timeout [ 225.840106][ T5817] team0: Port device team_slave_1 added [ 225.958379][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.967709][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.980784][ T5104] Bluetooth: hci2: command tx timeout [ 225.995016][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.000366][ T5104] Bluetooth: hci4: command tx timeout [ 226.070873][ T5803] hsr_slave_0: entered promiscuous mode [ 226.081461][ T5803] hsr_slave_1: entered promiscuous mode [ 226.091161][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 226.097218][ T5803] Cannot create hsr debugfs directory [ 226.147338][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.155233][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.182073][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.214155][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.221395][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.248184][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.281008][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.288435][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.315446][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.339721][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.347259][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.374695][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.484466][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.492305][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.519719][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.764388][ T5813] hsr_slave_0: entered promiscuous mode [ 226.776006][ T5813] hsr_slave_1: entered promiscuous mode [ 226.785017][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 226.791313][ T5813] Cannot create hsr debugfs directory [ 226.989611][ T5804] hsr_slave_0: entered promiscuous mode [ 227.001120][ T5804] hsr_slave_1: entered promiscuous mode [ 227.009419][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 227.015884][ T5804] Cannot create hsr debugfs directory [ 227.215489][ T5817] hsr_slave_0: entered promiscuous mode [ 227.226655][ T5817] hsr_slave_1: entered promiscuous mode [ 227.236050][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 227.242377][ T5817] Cannot create hsr debugfs directory [ 227.890951][ T5104] Bluetooth: hci1: command tx timeout [ 227.896714][ T5805] Bluetooth: hci0: command tx timeout [ 227.898874][ T5807] Bluetooth: hci3: command tx timeout [ 228.040757][ T5807] Bluetooth: hci2: command tx timeout [ 228.049856][ T5807] Bluetooth: hci4: command tx timeout [ 228.512420][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.597408][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.649455][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.697447][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.903867][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.932444][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.958039][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.008217][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.037151][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.082426][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.103199][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.184346][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.459521][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.516718][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.576163][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.624400][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.958432][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.015666][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.104243][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.168797][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.285154][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.541332][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.632296][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.725236][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.795232][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.802990][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.845088][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.938636][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.946394][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.992386][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.000110][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.056813][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.065651][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.232512][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.408504][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.416262][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.493420][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.634603][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.642831][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.816538][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.930887][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.938739][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.093967][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.102079][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.289206][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.547578][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.631739][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.639430][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.754479][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.762514][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.093144][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.236964][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.689066][ T5803] veth0_vlan: entered promiscuous mode [ 234.809950][ T5803] veth1_vlan: entered promiscuous mode [ 234.846125][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.897933][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.047611][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.054650][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.304748][ T5803] veth0_macvtap: entered promiscuous mode [ 235.377841][ T5803] veth1_macvtap: entered promiscuous mode [ 235.460733][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.697356][ T5813] veth0_vlan: entered promiscuous mode [ 235.741958][ T5804] veth0_vlan: entered promiscuous mode [ 235.763004][ T5813] veth1_vlan: entered promiscuous mode [ 235.801558][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.892271][ T5804] veth1_vlan: entered promiscuous mode [ 235.942139][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.085896][ T3673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.106937][ T3673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.228249][ T3673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.258115][ T5813] veth0_macvtap: entered promiscuous mode [ 236.287979][ T5817] veth0_vlan: entered promiscuous mode [ 236.322629][ T3673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.397726][ T5813] veth1_macvtap: entered promiscuous mode [ 236.462597][ T5817] veth1_vlan: entered promiscuous mode [ 236.495720][ T5804] veth0_macvtap: entered promiscuous mode [ 236.583598][ T5804] veth1_macvtap: entered promiscuous mode [ 236.633751][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.762072][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.946109][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.966631][ T5817] veth0_macvtap: entered promiscuous mode [ 236.979041][ T195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.018925][ T195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.079293][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.093928][ T5817] veth1_macvtap: entered promiscuous mode [ 237.137663][ T195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.187708][ T195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.252960][ T195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.304733][ T195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.359234][ T195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.388528][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.412017][ T195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.495075][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.632238][ T195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.747280][ T5810] veth0_vlan: entered promiscuous mode [ 237.766513][ T195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.827375][ T195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.897163][ T5810] veth1_vlan: entered promiscuous mode [ 237.941419][ T195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.274178][ T5810] veth0_macvtap: entered promiscuous mode [ 238.360155][ T5810] veth1_macvtap: entered promiscuous mode [ 238.634062][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.725613][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.854988][ T3701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.902828][ T3701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.988989][ T3701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.061734][ T3701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.155382][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.164421][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.381223][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.389516][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.696937][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.707046][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.021503][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.023420][ T5094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.030045][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.039759][ T5094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.066270][ T5803] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 245.231628][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.240112][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.647040][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.655896][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.947756][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.956622][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.160597][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 246.437475][ T5865] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 246.451860][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.463701][ T5865] usb 1-1: Product: syz [ 246.468524][ T5865] usb 1-1: Manufacturer: syz [ 246.474197][ T5865] usb 1-1: SerialNumber: syz [ 246.592433][ T5865] usb 1-1: config 0 descriptor?? [ 247.057699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 247.074337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 247.209602][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.217957][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.648069][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.656722][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.678558][ T6007] program syz.1.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.724536][ T5865] usb 1-1: Firmware version (0.0) predates our first public release. [ 247.733335][ T5865] usb 1-1: Please update to version 0.2 or newer [ 247.926411][ T6003] xt_connbytes: Forcing CT accounting to be enabled [ 247.933807][ T6003] xt_NFQUEUE: number of total queues is 0 [ 248.160974][ T5865] usb 1-1: USB disconnect, device number 2 [ 248.186200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 248.388786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.596094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.142150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.524181][ T6020] Zero length message leads to an empty skb [ 249.692411][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 249.813647][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 249.822920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 249.921183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 249.934982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 250.030721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 256.490565][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 256.700837][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 256.788473][ T5868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.799444][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.810679][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.821717][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.835516][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.845336][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.414547][ T5868] usb 5-1: GET_CAPABILITIES returned 0 [ 257.421453][ T5868] usbtmc 5-1:16.0: can't read capabilities [ 257.612316][ T5868] usb 5-1: USB disconnect, device number 2 [ 260.301072][ T5865] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 260.576093][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 260.625435][ T5865] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 260.636966][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.690885][ T6065] syzkaller0: entered promiscuous mode [ 260.696593][ T6065] syzkaller0: entered allmulticast mode [ 260.807566][ T5865] usb 5-1: config 0 descriptor?? [ 261.042583][ T5865] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 261.251038][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.263102][ T6063] ===================================================== [ 261.271604][ T6063] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 261.281532][ T6063] _copy_to_user+0xcc/0x120 [ 261.286622][ T6063] i2cdev_ioctl_smbus+0x586/0x660 [ 261.296244][ T6063] i2cdev_ioctl+0xa14/0xf40 [ 261.303733][ T6063] __se_sys_ioctl+0x23c/0x400 [ 261.309100][ T6063] __x64_sys_ioctl+0x97/0xe0 [ 261.314397][ T6063] x64_sys_call+0x18a7/0x3e70 [ 261.319616][ T6063] do_syscall_64+0xd3/0xf80 [ 261.324502][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.330949][ T6063] [ 261.333551][ T6063] Uninit was stored to memory at: [ 261.339080][ T6063] __i2c_smbus_xfer+0x24ce/0x2eb0 [ 261.344943][ T6063] i2c_smbus_xfer+0x2cd/0x460 [ 261.350014][ T6063] i2cdev_ioctl_smbus+0x4a1/0x660 [ 261.355432][ T6063] i2cdev_ioctl+0xa14/0xf40 [ 261.360634][ T6063] __se_sys_ioctl+0x23c/0x400 [ 261.365539][ T6063] __x64_sys_ioctl+0x97/0xe0 [ 261.371076][ T6063] x64_sys_call+0x18a7/0x3e70 [ 261.376254][ T6063] do_syscall_64+0xd3/0xf80 [ 261.381271][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.387484][ T6063] [ 261.395386][ T6063] Local variable msgbuf1.i created at: [ 261.402438][ T6063] __i2c_smbus_xfer+0x830/0x2eb0 [ 261.407610][ T6063] i2c_smbus_xfer+0x2cd/0x460 [ 261.412883][ T6063] [ 261.415414][ T6063] Byte 0 of 1 is uninitialized [ 261.420841][ T6063] Memory access of size 1 starts at ffff88804fd33d06 [ 261.427879][ T6063] Data copied to user address 0000200000000040 [ 261.435012][ T6063] [ 261.437523][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz.4.23 Tainted: G L syzkaller #0 PREEMPT(none) [ 261.448936][ T6063] Tainted: [L]=SOFTLOCKUP [ 261.453875][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.466743][ T6063] ===================================================== [ 261.474145][ T6063] Disabling lock debugging due to kernel taint [ 261.480831][ T6063] Kernel panic - not syncing: kmsan.panic set ... [ 261.487548][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz.4.23 Tainted: G B L syzkaller #0 PREEMPT(none) [ 261.498911][ T6063] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 261.504649][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.515144][ T6063] Call Trace: [ 261.518631][ T6063] [ 261.521867][ T6063] __dump_stack+0x26/0x30 [ 261.526704][ T6063] dump_stack_lvl+0x50/0x1c0 [ 261.531798][ T6063] ? dump_stack+0x12/0x25 [ 261.536548][ T6063] dump_stack+0x1e/0x25 [ 261.540918][ T6063] vpanic+0x435/0xd30 [ 261.545062][ T6063] panic+0x15d/0x160 [ 261.549306][ T6063] kmsan_report+0x31c/0x320 [ 261.553971][ T6063] ? kmsan_internal_check_memory+0x1e1/0x230 [ 261.560098][ T6063] ? kmsan_copy_to_user+0xf1/0x190 [ 261.565477][ T6063] ? _copy_to_user+0xcc/0x120 [ 261.570445][ T6063] ? i2cdev_ioctl_smbus+0x586/0x660 [ 261.576157][ T6063] ? i2cdev_ioctl+0xa14/0xf40 [ 261.581032][ T6063] ? __se_sys_ioctl+0x23c/0x400 [ 261.586295][ T6063] ? __x64_sys_ioctl+0x97/0xe0 [ 261.591220][ T6063] ? x64_sys_call+0x18a7/0x3e70 [ 261.596770][ T6063] ? do_syscall_64+0xd3/0xf80 [ 261.601944][ T6063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.608254][ T6063] ? kmsan_get_metadata+0xfb/0x160 [ 261.613848][ T6063] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 261.619299][ T6063] ? __i2c_transfer+0x1179/0x3110 [ 261.624535][ T6063] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 261.631843][ T6063] ? kmsan_get_metadata+0xfb/0x160 [ 261.637675][ T6063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.644328][ T6063] ? __i2c_smbus_xfer+0x1e54/0x2eb0 [ 261.650099][ T6063] ? kmsan_get_metadata+0xfb/0x160 [ 261.655543][ T6063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 261.661818][ T6063] kmsan_internal_check_memory+0x1e1/0x230 [ 261.668227][ T6063] kmsan_copy_to_user+0xf1/0x190 [ 261.673719][ T6063] _copy_to_user+0xcc/0x120 [ 261.678564][ T6063] i2cdev_ioctl_smbus+0x586/0x660 [ 261.683905][ T6063] i2cdev_ioctl+0xa14/0xf40 [ 261.688672][ T6063] ? kmsan_get_shadow_origin_ptr+0x89/0xb0 [ 261.694848][ T6063] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 261.700045][ T6063] __se_sys_ioctl+0x23c/0x400 [ 261.705379][ T6063] __x64_sys_ioctl+0x97/0xe0 [ 261.710771][ T6063] x64_sys_call+0x18a7/0x3e70 [ 261.716136][ T6063] do_syscall_64+0xd3/0xf80 [ 261.721318][ T6063] ? clear_bhb_loop+0x40/0x90 [ 261.726301][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.732655][ T6063] RIP: 0033:0x7fd5e3b8f749 [ 261.737335][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.757963][ T6063] RSP: 002b:00007fd5e4afa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.767395][ T6063] RAX: ffffffffffffffda RBX: 00007fd5e3de5fa0 RCX: 00007fd5e3b8f749 [ 261.775788][ T6063] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000007 [ 261.784063][ T6063] RBP: 00007fd5e3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.792664][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.801042][ T6063] R13: 00007fd5e3de6038 R14: 00007fd5e3de5fa0 R15: 00007ffc106e8b38 [ 261.809588][ T6063] [ 261.813785][ T6063] Kernel Offset: disabled [ 261.818396][ T6063] Rebooting in 86400 seconds..