last executing test programs: 23.52615188s ago: executing program 0 (id=28): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22.541966295s ago: executing program 0 (id=33): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'veth0\x00', {0x2, 0x4e21, @empty}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xb91e9c5a8444a131, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x8854) unshare(0x6020400) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000940), 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000007c0)={0xf0f023}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="be870175129f157f75ad7fe9f010fede748024e592cbce05b688ff5382823528a81040c6862e94b4b5ec72ec28fd2cd1fecd193922a0d7c18da37701c47e82dc235ab547b08ccc6632ecdb686b156b3ee44fd7197ce8b97b07df00f825cc73c13a5fa90645501a14c5d8474268448540a4882d452086787fcef38af8ba8d4d502d5999964a56ed83bf4161"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x224, 0x0, 0x0, 0x148, 0x0, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x8, 0x9, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xbb04, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x280) socket$nl_route(0x10, 0x3, 0x0) 18.780613215s ago: executing program 4 (id=41): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x40, 0x83, 0x0, 0x4}, {0x6, 0x68, 0x0, 0x2}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 12.228615957s ago: executing program 1 (id=51): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x44}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 10.936978553s ago: executing program 1 (id=54): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="8101000000f8", 'gre0\x00'}}, 0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x7fffffffffffebf, 0x48011) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x8, 0x20000000005, 0x6, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.287337708s ago: executing program 3 (id=57): socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 9.187557587s ago: executing program 1 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8.833526806s ago: executing program 0 (id=60): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 8.156037305s ago: executing program 1 (id=61): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x800000, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x20, "5c0a0551"}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000}) 7.995012969s ago: executing program 3 (id=62): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 7.664318325s ago: executing program 0 (id=63): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 7.270753511s ago: executing program 1 (id=64): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400"], 0x44}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 7.194816949s ago: executing program 4 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 6.902375083s ago: executing program 3 (id=66): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6.46207315s ago: executing program 4 (id=68): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x20000400) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x3b, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038d", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000002c80), 0x4}, 0x4c) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)) 6.117295065s ago: executing program 1 (id=69): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r6, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) unshare(0x6020400) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x29, r7}, 0x10) read$FUSE(r6, &(0x7f0000001400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x9, 0x3, [0x2], [0x810003, 0xfffffffe, 0x200000], [0x5, 0x1d, 0x80, 0x1], [0x8ac2, 0x4, 0xfffffffffffffffd]}) r10 = socket(0x11, 0x3, 0xe) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) recvmsg(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffca2, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40010000) 6.060220773s ago: executing program 3 (id=70): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x201}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) recvmsg(r1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x17, 0x4, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}}, 0x3c}}, 0x4000) 5.808505219s ago: executing program 2 (id=71): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x194, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 5.614197456s ago: executing program 4 (id=72): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0x98, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x44, 0x6, 0x580, 0x12c, 0x98, 0x12c, 0x3d0, 0x3d0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0xd, 0x1}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00', {0xff}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0x1d8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x2, 0x4, 0x4, 0x1]}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x11c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv6=@local, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5dc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000004c0)="1a0487cfa60ba42dc27e927e4cf385e1e386f5112c6a6ff242f24761165513cca06f78574f874bc12f8cae180a1b8f6aa4d110a396a444941cbe5b81eeaacd56262e29bb8414f15ba468b1d330109032644e77feb22b8308889da7ade1763eeac3bc0701393f08ebcb79b2768b280ca31ca50dd425d05d7c6c0a3c37eb4548f6a0467bbc2bfed7e41d0cdb28986a355abdcfa6ae581efc79a4b769ca724ac2bd56d29767676057cf803cbe8c84d6ffd38dbe7be376cb2a5332ae7b18d0ff0b128f8dfb9547e6985c58c0755a59c357424d2df40f2ba1186b37f5ebb0c17f1657", 0xe0}, {&(0x7f00000000c0)="2e3a91a24d73d372024b93da9bd3e6f88dce268494d0a615c7703c35ffa7e4", 0x1f}, {&(0x7f0000000300)="2f0a3724757487902f6093eb4bc4dda8956450021378d9e6bda044d1a78cc3035291799f433212e2946b2c5915f05fe62ca6069ba4e19ba4eb327c49828b56a9a6", 0x41}, {&(0x7f00000003c0)="eb5dbd811b61cc87acc427181374d686d7a5c1ee150154790042d41c70acea27ca930580a75b8ff6e3fd4f50cb52d752ff83d03f8339136e08058cac5a093f5eaea77a4f0ac37020d06db86114c6b6239d80bbd1afb519b46571066c1f3cceda86e63dfd2286064e020d94c5bba4335d3d97451689630c5833191f7c3f93b5e2625f46c3474d", 0x86}, {&(0x7f0000000c00)="25f6106818676975862f6a10a6b41a0f81ec24ebfacbb649446a2ca733b3c2fd7f7dd9931e21c9bf6a6e8c195e828655f7c56cc3f51f74cfe89e31cf06197dfd7e551a797680f16401106cac3f0095e85b1ca854a94823df43f99c0a15f8665d9e8abfd8a4f3684c6203de52d46f89fc7cd10f7b6b33bc4137551855f1b573f7e4da6f116f3e8c62eedc6e2caa5b9374fbfe6e3b4cd79c8d816301178eebcfeedee57fac", 0xa4}, {&(0x7f0000000cc0)="9f498cf1cc526f6b1ed470b0cb62e119672c642431f028c56c8134c8b33c0d4ac2550447d4cda770ac10b4236d232d7fb165073ef0dabbffbf1e994b8b0c3eed4840b99269e2e562df4b20d2d7d32b205b7d8ea4cac2ec748ac1f02d99277b04f78e77d079bf39f5c2edf7957cb4ed9c40680762c5f6097bf2e5457733bed58c0d786eda05ba26182ae3e67321d9c8a224ba7bef9738e007de89e2908630d468707549b407233fd8d5826ff8d3da30bb41153622cfcdb8afea0e637a512e660483a0c41ad3fd9f71d87765e203d01de8c896ec2300980d444acdf13baf55b8c98b673315c2cf0601320f", 0xea}, {&(0x7f00000021c0)="c6c0cd10eece21787da22826459cbc791e4b386171d55642113892115b77b1b086e9e9966371a5054128f642c4955ec6ccb65b19aa008094dedb4f8f0087", 0x3e}, {&(0x7f00000005c0)="cb032dc0a5541226a4f97030e0f3a7", 0xf}], 0x8, &(0x7f0000000e00)=[{0xf8, 0x110, 0xfff, "564f7d5ebeb5f81aa6309908006006f2818decdf85cd83fbc30791c7fa71feed501f2dca0705223d8b1ef296325a320d1fdfc045cf598784a159abecde522c08bf80c09a8973e479db498d95106451844484669f8270664162670a382d98d8474e3455cb79d88db01d7caa6e42e6282312e25c1cdf2d0f02d9191123dc9141163d4eaee3de17bfe5e392670dfdf2d6e86958c7e3548c8b0c98cf80ab751ad40bb9acd30de305ddb30626d1166edf4e81a42721dd766598164558c09cc5305a9522d7bdd6f73a15c9bf8f743b70642fe63aad03baf812cea56247797e0e98b64bd2beb191cb2b193f0d"}, {0xfe4, 0x109, 0x9, "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"}, {0x8c, 0x116, 0x4, "5b00bceb754ea2722f8ce60d55a4ed24c8bf60b97b291b6f6b804716b4bdeb8d859d4f92e98d8ca6af733fcbc4dd7af357dda30e8b6f3e45ef2bdaddf29b0a4736df718057c882634e54f3bc53fbd60b95dad719c816b3f2d329c7c5d2886ee68e18daa42afe7f7db0666e2d4898c23f0228bd821817acb50870383a5bd5"}, {0x90, 0x102, 0x2, "5f5ed8eb313c685cdb6a12edbb5c080f498848d517c53d1af9c07afc748f03472b539ddf2376c260509af298a47c403d21df10ce2aed8d46fdf9fd4279371d7cf304c9657ae245868b6a4d90bcd681e4cffd1216e1666a8350f2037d965b980a69d3ba2ac83ceb8371df35dcb892e378006de73772441e77a00d140b0cd513b332"}, {0x78, 0x10a, 0x4, "09240c056c1330f8f26c4f865cdd282f846c32f4f6d16b4bb731555cb202fc9b79b750bfb50a608d388a3c96d48770ff7af192fe12148d6b824683854028ea76e0fab621dab4a6c1dd496f2920c575bc756d592450e64831b176a56371d824ddb43b00e9c79b1ca98963d2cd"}, {0xd8, 0x1, 0xf, "6eb4066684ffafac46df78d6413d546d24d3831b6d163f142c8229fa970413cfbd640997dd14c3dcbfbeb96c39dac7f926dc2b62cdeada111ae192643f540bab3269f232c3d552b83165a2549bb0f1101c74970d79360591efcb9407b5497e9daa706232985f0649ccfa732b657fb6a1bab36460b2c3b1a50a33f0d0becc9d5bd1654885fb891fb72269aee785bf73f18e37012822890173751fe9cdb4492a3bd378534014a9ae711d9dfafaf26f9d235706153cffcf06a522bbe45bf97330daf43dda48561126cd820b"}], 0x1348, 0x804}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12982}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.959269139s ago: executing program 2 (id=73): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') socket(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x4, r5, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x60}}, 0x14) 4.467977653s ago: executing program 3 (id=74): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0, 0x100000}], 0x2) 3.221956296s ago: executing program 3 (id=75): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x40, 0x83, 0x0, 0x4}, {0x6, 0x68, 0x0, 0x2}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.053561016s ago: executing program 2 (id=76): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r0, 0x1, 0x70bd26, 0x21dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x560}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40) 2.134449229s ago: executing program 2 (id=77): socket$inet6_tcp(0xa, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = syz_io_uring_setup(0x156, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x2, 0x51}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.95021814s ago: executing program 0 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000080) 1.936694886s ago: executing program 4 (id=79): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400"], 0x44}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.053925157s ago: executing program 2 (id=80): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 880.311644ms ago: executing program 0 (id=81): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x11}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 598.565696ms ago: executing program 4 (id=82): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) write$P9_RWSTAT(r0, &(0x7f0000000180)={0x7, 0x7f, 0x1}, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 0s ago: executing program 2 (id=83): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x1, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420c00deeeffff0000ff0c70f3"}, 0x14000e, 0x2}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180), 0x1}], 0x2000000000000297, 0x1, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 184.625142][ T5560] cgroup: Unknown subsys name 'net' [ 184.758873][ T5560] cgroup: Unknown subsys name 'cpuset' [ 184.775645][ T5560] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 191.313271][ T5560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 196.436269][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.450243][ T5579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.462310][ T5579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.487693][ T5579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.502842][ T5579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.615696][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.627592][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.637508][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.662656][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.674740][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.680638][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.690025][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.693875][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.703521][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.710146][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.723823][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.748901][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.763533][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.783131][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.795824][ T5591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.809542][ T4878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.827348][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.829821][ T4878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.846384][ T4878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.862954][ T5579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.558383][ T5589] Bluetooth: hci0: command tx timeout [ 198.798518][ T5589] Bluetooth: hci2: command tx timeout [ 198.804252][ T5589] Bluetooth: hci1: command tx timeout [ 198.958704][ T4878] Bluetooth: hci3: command tx timeout [ 198.964488][ T5589] Bluetooth: hci4: command tx timeout [ 200.638509][ T5589] Bluetooth: hci0: command tx timeout [ 200.879849][ T5589] Bluetooth: hci1: command tx timeout [ 200.885621][ T4878] Bluetooth: hci2: command tx timeout [ 201.042448][ T4878] Bluetooth: hci4: command tx timeout [ 201.048296][ T5589] Bluetooth: hci3: command tx timeout [ 201.733534][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.742158][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.753571][ T5584] bridge_slave_0: entered allmulticast mode [ 201.764285][ T5584] bridge_slave_0: entered promiscuous mode [ 201.850720][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.872826][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.890571][ T5584] bridge_slave_1: entered allmulticast mode [ 201.932171][ T5584] bridge_slave_1: entered promiscuous mode [ 201.969869][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.999196][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.007043][ T5583] bridge_slave_0: entered allmulticast mode [ 202.037464][ T5583] bridge_slave_0: entered promiscuous mode [ 202.221651][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.248919][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.286001][ T5583] bridge_slave_1: entered allmulticast mode [ 202.297362][ T5583] bridge_slave_1: entered promiscuous mode [ 202.354825][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.559482][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.662418][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.700470][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.708333][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.715981][ T5585] bridge_slave_0: entered allmulticast mode [ 202.722487][ T4878] Bluetooth: hci0: command tx timeout [ 202.731769][ T5585] bridge_slave_0: entered promiscuous mode [ 202.743674][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.751789][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.760307][ T5578] bridge_slave_0: entered allmulticast mode [ 202.770241][ T5578] bridge_slave_0: entered promiscuous mode [ 202.782561][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.790441][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.798342][ T5582] bridge_slave_0: entered allmulticast mode [ 202.807522][ T5582] bridge_slave_0: entered promiscuous mode [ 202.828205][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.865118][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.873437][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.881312][ T5585] bridge_slave_1: entered allmulticast mode [ 202.891018][ T5585] bridge_slave_1: entered promiscuous mode [ 202.902595][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.910944][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.918799][ T5578] bridge_slave_1: entered allmulticast mode [ 202.927428][ T5578] bridge_slave_1: entered promiscuous mode [ 202.938905][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.946518][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.954739][ T5582] bridge_slave_1: entered allmulticast mode [ 202.961189][ T4878] Bluetooth: hci2: command tx timeout [ 202.962725][ T5589] Bluetooth: hci1: command tx timeout [ 202.974884][ T5582] bridge_slave_1: entered promiscuous mode [ 203.018643][ T5584] team0: Port device team_slave_0 added [ 203.119612][ T5589] Bluetooth: hci4: command tx timeout [ 203.119742][ T4878] Bluetooth: hci3: command tx timeout [ 203.183727][ T5584] team0: Port device team_slave_1 added [ 203.256587][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.275984][ T5583] team0: Port device team_slave_0 added [ 203.291271][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.337539][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.356751][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.375481][ T5583] team0: Port device team_slave_1 added [ 203.447740][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.466473][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.533499][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.541108][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.567931][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.684708][ T5582] team0: Port device team_slave_0 added [ 203.693641][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.701443][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.727720][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.798777][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.805862][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.832240][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.854139][ T5582] team0: Port device team_slave_1 added [ 203.885514][ T5585] team0: Port device team_slave_0 added [ 203.900828][ T5578] team0: Port device team_slave_0 added [ 203.910318][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.918150][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.945061][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.993228][ T5585] team0: Port device team_slave_1 added [ 204.006583][ T5578] team0: Port device team_slave_1 added [ 204.062965][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.070325][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.096798][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.096929][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.117056][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.211548][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.219120][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.245607][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.315886][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.323236][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.349675][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.413619][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.421228][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.447641][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.489754][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.497285][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.523703][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.549883][ T5584] hsr_slave_0: entered promiscuous mode [ 204.559457][ T5584] hsr_slave_1: entered promiscuous mode [ 204.576001][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.583597][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.609954][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.722255][ T5583] hsr_slave_0: entered promiscuous mode [ 204.731612][ T5583] hsr_slave_1: entered promiscuous mode [ 204.740709][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 204.746611][ T5583] Cannot create hsr debugfs directory [ 204.799548][ T4878] Bluetooth: hci0: command tx timeout [ 204.946085][ T5582] hsr_slave_0: entered promiscuous mode [ 204.955547][ T5582] hsr_slave_1: entered promiscuous mode [ 204.964806][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 204.971126][ T5582] Cannot create hsr debugfs directory [ 205.039663][ T4878] Bluetooth: hci1: command tx timeout [ 205.041465][ T5589] Bluetooth: hci2: command tx timeout [ 205.085757][ T5578] hsr_slave_0: entered promiscuous mode [ 205.094850][ T5578] hsr_slave_1: entered promiscuous mode [ 205.103637][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 205.109626][ T5578] Cannot create hsr debugfs directory [ 205.198555][ T5589] Bluetooth: hci4: command tx timeout [ 205.202304][ T5585] hsr_slave_0: entered promiscuous mode [ 205.204458][ T4878] Bluetooth: hci3: command tx timeout [ 205.217169][ T5585] hsr_slave_1: entered promiscuous mode [ 205.226104][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 205.232169][ T5585] Cannot create hsr debugfs directory [ 206.575516][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.603854][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.617717][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.640840][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.668295][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.691335][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.716770][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.740364][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.842827][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.865009][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.876363][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.901428][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.915144][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.938826][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.951718][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.973215][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.185284][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.209576][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.257723][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.281549][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.293568][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.312772][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.356488][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.380774][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.518225][ T5578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.559782][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.573896][ T5578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.595952][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.622268][ T5578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.646295][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.657316][ T5578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.679662][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.985630][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.014888][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.025320][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.045976][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.086141][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.110861][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.150209][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.172262][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.300305][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.577733][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.692666][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.700255][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.741059][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.784186][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.791752][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.001630][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.103343][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.130065][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.137694][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.193401][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.250907][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.258486][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.436035][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.465047][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.596340][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.604060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.656823][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.674611][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.682299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.815666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.823378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.850969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.858652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.003913][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.134820][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.142516][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.334976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.342621][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.827544][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.582174][ T5584] veth0_vlan: entered promiscuous mode [ 213.638394][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.876799][ T5584] veth1_vlan: entered promiscuous mode [ 214.470262][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.575979][ T5583] veth0_vlan: entered promiscuous mode [ 214.677547][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.744262][ T5584] veth0_macvtap: entered promiscuous mode [ 214.817207][ T5584] veth1_macvtap: entered promiscuous mode [ 214.833596][ T5583] veth1_vlan: entered promiscuous mode [ 214.898929][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.139317][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.302187][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.384381][ T5578] veth0_vlan: entered promiscuous mode [ 215.446038][ T5583] veth0_macvtap: entered promiscuous mode [ 215.553625][ T115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.601674][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.612711][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.642703][ T5582] veth0_vlan: entered promiscuous mode [ 215.675149][ T5583] veth1_macvtap: entered promiscuous mode [ 215.724921][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.764164][ T5578] veth1_vlan: entered promiscuous mode [ 215.950329][ T5582] veth1_vlan: entered promiscuous mode [ 216.073708][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.210834][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.347079][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.362129][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.396125][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.423365][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.552323][ T5578] veth0_macvtap: entered promiscuous mode [ 216.702285][ T5582] veth0_macvtap: entered promiscuous mode [ 216.731912][ T5578] veth1_macvtap: entered promiscuous mode [ 216.771446][ T5585] veth0_vlan: entered promiscuous mode [ 216.833795][ T5582] veth1_macvtap: entered promiscuous mode [ 217.040220][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.078855][ T5585] veth1_vlan: entered promiscuous mode [ 217.177311][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.205577][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.307598][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.402703][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.417171][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.480942][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.503980][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.514897][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.586194][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.619441][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.646343][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.925633][ T5585] veth0_macvtap: entered promiscuous mode [ 218.071440][ T5585] veth1_macvtap: entered promiscuous mode [ 218.376453][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.521581][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.737140][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.763364][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.810103][ T115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.851450][ T115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.665891][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.725467][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.025268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.074993][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.556570][ T5584] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 222.928475][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.973662][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.266797][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.320465][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.516349][ T5829] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 224.783201][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.814162][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.133770][ T115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.179991][ T115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.494443][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.542019][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.733096][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.779519][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.707712][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.758504][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.231603][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.266177][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.662672][ T5858] sctp: [Deprecated]: syz.0.1 (pid 5858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.662672][ T5858] Use struct sctp_sack_info instead [ 227.689659][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 227.929232][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.966534][ T30] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.052370][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.150968][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 228.194105][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 228.262160][ T30] usb 2-1: Product: syz [ 228.274587][ T30] usb 2-1: Manufacturer: syz [ 228.301035][ T30] usb 2-1: SerialNumber: syz [ 228.761667][ T30] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 229.006299][ T30] usb 2-1: USB disconnect, device number 2 [ 229.048296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.318135][ T30] usblp0: removed [ 230.789640][ T30] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 231.028807][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.092984][ T30] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.143465][ T30] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 231.194535][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.276539][ T30] usb 5-1: config 0 descriptor?? [ 231.538368][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 231.608790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 232.888718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 234.215004][ T9] usb 5-1: USB disconnect, device number 2 [ 235.358663][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 235.555543][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 235.777452][ T29] audit: type=1326 audit(1781620502.092:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 235.926058][ T29] audit: type=1326 audit(1781620502.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.044402][ T29] audit: type=1326 audit(1781620502.232:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.071169][ T29] audit: type=1326 audit(1781620502.232:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.110913][ T29] audit: type=1326 audit(1781620502.242:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.275631][ T29] audit: type=1326 audit(1781620502.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.393287][ T29] audit: type=1326 audit(1781620502.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.427757][ T29] audit: type=1326 audit(1781620502.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.454699][ T29] audit: type=1326 audit(1781620502.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 236.540273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 236.584723][ T29] audit: type=1326 audit(1781620502.362:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.4.14" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f5601c code=0x7ffc0000 [ 238.074020][ T5905] syzkaller0: entered promiscuous mode [ 238.110154][ T5905] syzkaller0: entered allmulticast mode [ 242.076464][ T5924] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 243.714549][ T5936] loop5: detected capacity change from 0 to 7 [ 244.055645][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 246.195769][ T5936] Dev loop5: unable to read RDB block 7 [ 246.254520][ T5936] loop5: unable to read partition table [ 246.300193][ T5936] loop5: partition table beyond EOD, truncated [ 246.359844][ T5936] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 250.398224][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 250.613381][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 250.673491][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.711833][ T9] usb 3-1: config 0 has no interface number 0 [ 250.777971][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 250.830894][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.866803][ T9] usb 3-1: Product: syz [ 250.897427][ T9] usb 3-1: Manufacturer: syz [ 250.942485][ T9] usb 3-1: SerialNumber: syz [ 251.037553][ T9] usb 3-1: config 0 descriptor?? [ 251.102790][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 251.183016][ T9] usb 3-1: selecting invalid altsetting 1 [ 251.203793][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 251.306688][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.349998][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 251.397759][ T9] usb 3-1: media controller created [ 251.931530][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.399541][ T5978] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 252.445540][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 252.510412][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 252.562531][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 253.521603][ T9] usb 3-1: USB disconnect, device number 2 [ 257.985298][ T6014] netlink: 48 bytes leftover after parsing attributes in process `syz.3.57'. [ 259.831186][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 259.875412][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 261.351359][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 261.610897][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 261.867358][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 261.901511][ T9] usb 5-1: config 1 has no interface number 0 [ 261.942327][ T9] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 262.002531][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 262.059951][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 262.154630][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 262.274071][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.356765][ T9] usb 5-1: Product: syz [ 262.371524][ T9] usb 5-1: Manufacturer: syz [ 262.395045][ T9] usb 5-1: SerialNumber: syz [ 262.546555][ T6053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.945962][ T6053] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 262.985768][ T6053] set match dimension is over the limit! [ 263.076983][ T6053] IPv6: NLM_F_REPLACE set, but no existing node found! [ 263.228525][ T6053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.334483][ T9] usb 5-1: No status endpoint found [ 263.529449][ T9] usb 5-1: USB disconnect, device number 3 [ 265.225045][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 265.274090][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 265.490916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 265.528398][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.538691][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.082932][ T6085] ===================================================== [ 267.090430][ T6085] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 [ 267.097683][ T6085] dvb_demux_read+0x580/0xa40 [ 267.102917][ T6085] vfs_readv+0x931/0xf30 [ 267.107299][ T6085] __ia32_compat_sys_preadv+0x2da/0x540 [ 267.113147][ T6085] ia32_sys_call+0x3e87/0x4360 [ 267.118288][ T6085] __do_fast_syscall_32+0x195/0x470 [ 267.123750][ T6085] do_fast_syscall_32+0x37/0x80 [ 267.133425][ T6085] do_SYSENTER_32+0x1f/0x30 [ 267.139284][ T6085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.148513][ T6085] [ 267.151015][ T6085] Uninit was created at: [ 267.155466][ T6085] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 267.161815][ T6085] alloc_pages_mpol+0x328/0x860 [ 267.166890][ T6085] alloc_pages_noprof+0x101/0x290 [ 267.172264][ T6085] __vmalloc_node_range_noprof+0xab0/0x2cd0 [ 267.178545][ T6085] __vmalloc_noprof+0x128/0x1f0 [ 267.183573][ T6085] vmalloc_array_noprof+0x48/0x80 [ 267.188874][ T6085] dvb_dmxdev_init+0xd8/0x680 [ 267.193676][ T6085] vidtv_bridge_probe+0x1bfd/0x2690 [ 267.201604][ T6085] platform_probe+0x213/0x370 [ 267.206526][ T6085] really_probe+0x4d5/0xe40 [ 267.212029][ T6085] __driver_probe_device+0x2fb/0x410 [ 267.217679][ T6085] driver_probe_device+0x70/0x8f0 [ 267.223351][ T6085] __driver_attach+0x541/0xaa0 [ 267.232553][ T6085] bus_for_each_dev+0x33b/0x580 [ 267.237679][ T6085] driver_attach+0x51/0x70 [ 267.243625][ T6085] bus_add_driver+0x54f/0xdb0 [ 267.249089][ T6085] driver_register+0x42e/0x6a0 [ 267.254090][ T6085] __platform_driver_register+0x65/0x80 [ 267.259949][ T6085] vidtv_bridge_init+0x73/0x100 [ 267.265006][ T6085] do_one_initcall+0x237/0xb30 [ 267.270178][ T6085] do_initcall_level+0x157/0x330 [ 267.275307][ T6085] do_initcalls+0x176/0x310 [ 267.280249][ T6085] do_basic_setup+0x22/0x30 [ 267.284927][ T6085] kernel_init_freeable+0x213/0x460 [ 267.290466][ T6085] kernel_init+0x2f/0x5e0 [ 267.294917][ T6085] ret_from_fork+0x20f/0x8d0 [ 267.299792][ T6085] ret_from_fork_asm+0x1a/0x30 [ 267.304714][ T6085] [ 267.307151][ T6085] CPU: 1 UID: 0 PID: 6085 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(lazy) [ 267.316669][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.326958][ T6085] ===================================================== [ 267.338029][ T6085] Disabling lock debugging due to kernel taint [ 267.544692][ T6085] Kernel panic - not syncing: kmsan.panic set ... [ 267.551324][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.2.83 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 267.562219][ T6085] Tainted: [B]=BAD_PAGE [ 267.566486][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.576715][ T6085] Call Trace: [ 267.580126][ T6085] [ 267.583169][ T6085] __dump_stack+0x26/0x30 [ 267.587777][ T6085] dump_stack_lvl+0x50/0x1c0 [ 267.592592][ T6085] ? dump_stack+0x12/0x25 [ 267.597156][ T6085] dump_stack+0x1e/0x25 [ 267.601496][ T6085] vpanic+0x7b4/0x1430 [ 267.606053][ T6085] panic+0x15d/0x160 [ 267.610206][ T6085] kmsan_report+0x31a/0x320 [ 267.614937][ T6085] ? __msan_warning+0x1b/0x30 [ 267.619827][ T6085] ? dvb_demux_read+0x580/0xa40 [ 267.624851][ T6085] ? vfs_readv+0x931/0xf30 [ 267.629442][ T6085] ? __ia32_compat_sys_preadv+0x2da/0x540 [ 267.635395][ T6085] ? ia32_sys_call+0x3e87/0x4360 [ 267.640566][ T6085] ? __do_fast_syscall_32+0x195/0x470 [ 267.646150][ T6085] ? do_fast_syscall_32+0x37/0x80 [ 267.651376][ T6085] ? do_SYSENTER_32+0x1f/0x30 [ 267.656294][ T6085] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.663019][ T6085] ? __rcu_read_unlock+0x6c/0xd0 [ 267.668156][ T6085] ? aa_file_perm+0x4b9/0x2870 [ 267.673153][ T6085] ? aa_file_perm+0x4f0/0x2870 [ 267.678236][ T6085] ? copy_compat_iovec_from_user+0x25c/0x2c0 [ 267.684447][ T6085] ? kmsan_get_metadata+0xf1/0x160 [ 267.689792][ T6085] ? kmsan_get_metadata+0xf1/0x160 [ 267.695147][ T6085] ? kmsan_get_metadata+0xf1/0x160 [ 267.700500][ T6085] ? kmsan_get_metadata+0x146/0x160 [ 267.705920][ T6085] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 267.712483][ T6085] ? __pfx_dvb_demux_read+0x10/0x10 [ 267.717962][ T6085] ? kmsan_get_metadata+0x146/0x160 [ 267.723415][ T6085] __msan_warning+0x1b/0x30 [ 267.728132][ T6085] dvb_demux_read+0x580/0xa40 [ 267.733011][ T6085] ? __pfx_dvb_demux_read+0x10/0x10 [ 267.738394][ T6085] vfs_readv+0x931/0xf30 [ 267.742839][ T6085] ? __pfx_dvb_demux_read+0x10/0x10 [ 267.748308][ T6085] ? kmsan_get_metadata+0xf1/0x160 [ 267.753690][ T6085] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.759925][ T6085] __ia32_compat_sys_preadv+0x2da/0x540 [ 267.765802][ T6085] ia32_sys_call+0x3e87/0x4360 [ 267.770814][ T6085] __do_fast_syscall_32+0x195/0x470 [ 267.776245][ T6085] do_fast_syscall_32+0x37/0x80 [ 267.781555][ T6085] do_SYSENTER_32+0x1f/0x30 [ 267.786296][ T6085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.792977][ T6085] RIP: 0023:0xf7f3701c [ 267.797235][ T6085] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 267.817059][ T6085] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 267.825678][ T6085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 267.833816][ T6085] RDX: 0000000000000297 RSI: 0000000000000001 RDI: 000000000000000b [ 267.842029][ T6085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.850143][ T6085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.858275][ T6085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.866433][ T6085] [ 267.870218][ T6085] Kernel Offset: disabled [ 267.874643][ T6085] Rebooting in 86400 seconds..