last executing test programs: 8.331064311s ago: executing program 3 (id=3): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x8, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) keyctl$session_to_parent(0x12) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a010400000000000000000a0000010900010073797a31000000004c00048010000180080001006c6f670004000280380001800b0001006f626a7265660000280002800900020073797a30000000000800014000000002080003"], 0x1ac}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe2$9p(&(0x7f00000002c0), 0x80) lseek(0xffffffffffffffff, 0xfffffffe, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 8.083916969s ago: executing program 2 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 7.259855146s ago: executing program 2 (id=6): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 6.862434725s ago: executing program 0 (id=1): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48d4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioprio_set$pid(0x3, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xc45, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x7f03) 6.799692758s ago: executing program 1 (id=2): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) 6.468707951s ago: executing program 4 (id=5): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000001ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.514941776s ago: executing program 1 (id=7): mknod(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2020, 0x0) 5.423123506s ago: executing program 2 (id=8): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 5.305805315s ago: executing program 4 (id=9): r0 = open(0x0, 0x88800, 0x12) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x78}}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728", 0x1f) unshare(0x22020600) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x4) r10 = openat$cgroup_pressure(r9, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000040)={'full', 0x20, 0x800, 0x20, 0x7}, 0x19) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) 4.28549637s ago: executing program 1 (id=10): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000000)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r7, @ANYRES8=r6, @ANYRES64=r5, @ANYRES16=r8, @ANYRES64=r0], 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) dup2(r3, r3) r9 = socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r11, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r12, 0xffffffffffffffff, 0x0) 3.584805772s ago: executing program 3 (id=11): r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(r0) unshare(0x480) bind$rxrpc(r1, 0x0, 0x0) 3.542726429s ago: executing program 2 (id=12): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.485746358s ago: executing program 4 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2.679879436s ago: executing program 3 (id=14): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) r1 = syz_open_dev$media(&(0x7f0000002d80), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f00000058c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x24000450}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r7, 0x0, 0xea, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x400519, 0xfffffffd, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x40, 0x0, 0x0, 0x2], [0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0x81, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x10, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x97, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x20008, 0x5, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 2.189673367s ago: executing program 4 (id=15): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 1.990118059s ago: executing program 2 (id=16): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0xff03}, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r4 = epoll_create1(0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0xff08, 0x1, 0xb}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r9, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) 418.344642ms ago: executing program 4 (id=17): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) 0s ago: executing program 2 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 191.309487][ T5784] cgroup: Unknown subsys name 'net' [ 191.459215][ T5784] cgroup: Unknown subsys name 'cpuset' [ 191.476221][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.002596][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.034119][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.048354][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.059561][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.069582][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.079519][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.089179][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.096961][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.098960][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.107199][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.121019][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.126145][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.133420][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.154786][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.163593][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.218650][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.349288][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.362080][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.362462][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.378405][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.389303][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.405095][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.420083][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.433638][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.442337][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.514773][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.429913][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 206.248233][ T5803] Bluetooth: hci1: command tx timeout [ 206.254817][ T5803] Bluetooth: hci0: command tx timeout [ 206.259814][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 206.344185][ T5803] Bluetooth: hci2: command tx timeout [ 206.520340][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.528367][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.536086][ T5801] bridge_slave_0: entered allmulticast mode [ 206.546151][ T5801] bridge_slave_0: entered promiscuous mode [ 206.588168][ T5803] Bluetooth: hci3: command tx timeout [ 206.808192][ T5803] Bluetooth: hci4: command tx timeout [ 206.844433][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 206.864895][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.872623][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.880493][ T5801] bridge_slave_1: entered allmulticast mode [ 206.889475][ T5801] bridge_slave_1: entered promiscuous mode [ 207.095402][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.166721][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.296342][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 207.406921][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 207.437295][ T5801] team0: Port device team_slave_0 added [ 207.561750][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.569600][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.577431][ T5800] bridge_slave_0: entered allmulticast mode [ 207.587370][ T5800] bridge_slave_0: entered promiscuous mode [ 207.620461][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.630681][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.638619][ T5800] bridge_slave_1: entered allmulticast mode [ 207.648400][ T5800] bridge_slave_1: entered promiscuous mode [ 207.665861][ T5801] team0: Port device team_slave_1 added [ 207.996457][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.004633][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.031066][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.055438][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.109941][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.117128][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.147411][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.208617][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.322930][ T5803] Bluetooth: hci1: command tx timeout [ 208.330379][ T5811] Bluetooth: hci0: command tx timeout [ 208.398553][ T5803] Bluetooth: hci2: command tx timeout [ 208.633464][ T5801] hsr_slave_0: entered promiscuous mode [ 208.644203][ T5801] hsr_slave_1: entered promiscuous mode [ 208.648170][ T5803] Bluetooth: hci3: command tx timeout [ 208.706547][ T5800] team0: Port device team_slave_0 added [ 208.810016][ T5800] team0: Port device team_slave_1 added [ 208.826574][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.837124][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.844999][ T5812] bridge_slave_0: entered allmulticast mode [ 208.854958][ T5812] bridge_slave_0: entered promiscuous mode [ 208.873523][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.881463][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.883437][ T5803] Bluetooth: hci4: command tx timeout [ 208.889388][ T5807] bridge_slave_0: entered allmulticast mode [ 208.904134][ T5807] bridge_slave_0: entered promiscuous mode [ 208.982992][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.990758][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.998729][ T5812] bridge_slave_1: entered allmulticast mode [ 209.007433][ T5812] bridge_slave_1: entered promiscuous mode [ 209.017564][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.025335][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.033227][ T5807] bridge_slave_1: entered allmulticast mode [ 209.042916][ T5807] bridge_slave_1: entered promiscuous mode [ 209.301411][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.308716][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.335393][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.443092][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.464398][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.493275][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.500660][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.528626][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.553961][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.561748][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.569622][ T5813] bridge_slave_0: entered allmulticast mode [ 209.578949][ T5813] bridge_slave_0: entered promiscuous mode [ 209.602052][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.612057][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.620087][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.628030][ T5813] bridge_slave_1: entered allmulticast mode [ 209.638630][ T5813] bridge_slave_1: entered promiscuous mode [ 209.660715][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.886003][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.006870][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.042509][ T5812] team0: Port device team_slave_0 added [ 210.078453][ T5807] team0: Port device team_slave_0 added [ 210.197976][ T5812] team0: Port device team_slave_1 added [ 210.212782][ T5807] team0: Port device team_slave_1 added [ 210.398203][ T5803] Bluetooth: hci1: command tx timeout [ 210.404074][ T5811] Bluetooth: hci0: command tx timeout [ 210.420533][ T5800] hsr_slave_0: entered promiscuous mode [ 210.431079][ T5800] hsr_slave_1: entered promiscuous mode [ 210.440109][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 210.446047][ T5800] Cannot create hsr debugfs directory [ 210.478102][ T5811] Bluetooth: hci2: command tx timeout [ 210.480291][ T5813] team0: Port device team_slave_0 added [ 210.595273][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.602734][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.629469][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.667241][ T5813] team0: Port device team_slave_1 added [ 210.677129][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.684504][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.711017][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.718373][ T5811] Bluetooth: hci3: command tx timeout [ 210.749411][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.756646][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.783005][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.889892][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.897044][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.923437][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.973615][ T5811] Bluetooth: hci4: command tx timeout [ 210.989407][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.996553][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.022826][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.105419][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.112730][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.139324][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.331896][ T5807] hsr_slave_0: entered promiscuous mode [ 211.342523][ T5807] hsr_slave_1: entered promiscuous mode [ 211.351782][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 211.357865][ T5807] Cannot create hsr debugfs directory [ 211.708465][ T5812] hsr_slave_0: entered promiscuous mode [ 211.719575][ T5812] hsr_slave_1: entered promiscuous mode [ 211.727999][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 211.733994][ T5812] Cannot create hsr debugfs directory [ 211.819574][ T5813] hsr_slave_0: entered promiscuous mode [ 211.832953][ T5813] hsr_slave_1: entered promiscuous mode [ 211.842250][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 211.848417][ T5813] Cannot create hsr debugfs directory [ 211.944143][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.037244][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.184145][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.315298][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.479916][ T5811] Bluetooth: hci0: command tx timeout [ 212.485774][ T5803] Bluetooth: hci1: command tx timeout [ 212.579245][ T5811] Bluetooth: hci2: command tx timeout [ 212.798507][ T5811] Bluetooth: hci3: command tx timeout [ 213.048010][ T5811] Bluetooth: hci4: command tx timeout [ 213.140157][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.183413][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.208213][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.242273][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.485702][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.549955][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.591233][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.619406][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.643799][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.665899][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.692233][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.783404][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.072957][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.175530][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.285165][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.351104][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.400560][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.441677][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.563157][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.570913][ T1847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.697060][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.704839][ T1847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.801823][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.956858][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.053651][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.182808][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.190580][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.246881][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.307606][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.315145][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.409609][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.417213][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.535840][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.543538][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.840161][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.071311][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.237652][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.289483][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.297196][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.318264][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.469639][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.477252][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.494493][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.502375][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.690108][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.697861][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.817030][ T5807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.829902][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.970305][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.985340][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.593848][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.286127][ T5801] veth0_vlan: entered promiscuous mode [ 218.346596][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.390992][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.495021][ T5801] veth1_vlan: entered promiscuous mode [ 219.006929][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.022545][ T5812] veth0_vlan: entered promiscuous mode [ 219.041684][ T5801] veth0_macvtap: entered promiscuous mode [ 219.160750][ T5801] veth1_macvtap: entered promiscuous mode [ 219.195410][ T5812] veth1_vlan: entered promiscuous mode [ 219.434371][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.521318][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.652155][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.763694][ T5812] veth0_macvtap: entered promiscuous mode [ 219.846149][ T5807] veth0_vlan: entered promiscuous mode [ 219.855840][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.913760][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.927911][ T5812] veth1_macvtap: entered promiscuous mode [ 219.963842][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.010769][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.165073][ T5807] veth1_vlan: entered promiscuous mode [ 220.252244][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.287865][ T5813] veth0_vlan: entered promiscuous mode [ 220.362068][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.409119][ T5813] veth1_vlan: entered promiscuous mode [ 220.502384][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.592863][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.609404][ T5807] veth0_macvtap: entered promiscuous mode [ 220.656921][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.710051][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.733531][ T5807] veth1_macvtap: entered promiscuous mode [ 220.914181][ T5813] veth0_macvtap: entered promiscuous mode [ 220.968887][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.991981][ T5813] veth1_macvtap: entered promiscuous mode [ 221.027397][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.194802][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.207409][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.291401][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.344896][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.381381][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.443957][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.515883][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.571494][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.620587][ T3664] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.669820][ T3664] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.760509][ T5800] veth0_vlan: entered promiscuous mode [ 221.893597][ T5800] veth1_vlan: entered promiscuous mode [ 222.240800][ T5800] veth0_macvtap: entered promiscuous mode [ 222.356497][ T5800] veth1_macvtap: entered promiscuous mode [ 222.573324][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.679906][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.800624][ T136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.829264][ T136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.875404][ T136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.929637][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.424653][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.433517][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.735203][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.743546][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.789318][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.797424][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.024512][ T4160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.035229][ T4160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.312164][ T5801] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.477419][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.492772][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.712484][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.721495][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.969875][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.978152][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.218296][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.226405][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.350773][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3'. [ 229.694021][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.702507][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.929257][ T4091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.938861][ T4091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.239733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.249798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.262011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.353346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 232.365553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.392505][ T6016] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9'. [ 232.438208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 234.099420][ T6029] process 'syz.2.12' launched '/dev/fd/3' with NULL argv: empty string added [ 234.290430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 234.300177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 234.772539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 234.788221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 234.941227][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.949938][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.860686][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.949971][ T6048] tipc: Started in network mode [ 235.955396][ T6048] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 235.974997][ T6048] tipc: Enabled bearer , priority 10 [ 236.102144][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 236.327549][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 236.337344][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.347523][ T24] usb 4-1: Product: syz [ 236.352132][ T24] usb 4-1: Manufacturer: syz [ 236.356964][ T24] usb 4-1: SerialNumber: syz [ 236.603462][ T24] usb 4-1: config 0 descriptor?? [ 236.684814][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 236.693375][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 236.693375][ T24] [ 236.701228][ T24] usb 4-1: selecting invalid altsetting 3 [ 236.707164][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 236.707164][ T24] [ 236.717950][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 236.830167][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.850767][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 236.859850][ T24] usb 4-1: media controller created [ 236.865428][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 236.871942][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 236.880823][ T24] dvb-usb: MAC address reading failed. [ 236.939980][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. ** 1 printk messages dropped ** [ 236.993788][ T6037] ===================================================== [ 236.994035][ T6037] BUG: KMSAN: uninit-value in hex_string+0x681/0x740 [ 236.994193][ T6037] hex_string+0x681/0x740 [ 236.994314][ T6037] pointer+0x2c7/0x1bd0 [ 236.994424][ T6037] vsnprintf+0xf8a/0x1bd0 [ 236.994534][ T6037] vscnprintf+0x6d/0x120 [ 236.994656][ T6037] printk_sprint+0x53/0x5c0 [ 236.994762][ T6037] vprintk_store+0xbb9/0x1530 [ 236.994868][ T6037] vprintk_emit+0x21a/0xb60 [ 236.994974][ T6037] vprintk_default+0x3f/0x50 [ 236.995085][ T6037] vprintk+0x36/0x50 [ 236.995216][ T6037] _printk+0x17e/0x1b0 [ 236.995368][ T6037] pctv452e_i2c_msg+0x82a/0x8f0 [ 236.995519][ T6037] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 236.995674][ T6037] __i2c_transfer+0xecd/0x3110 [ 236.995790][ T6037] i2c_transfer+0x300/0x4b0 [ 236.995902][ T6037] i2c_transfer_buffer_flags+0x138/0x200 [ 236.996031][ T6037] i2cdev_read+0x1b2/0x3c0 [ 236.996139][ T6037] vfs_read+0x27c/0xf90 [ 236.996301][ T6037] ksys_pread64+0x1d6/0x2a0 [ 236.996407][ T6037] __ia32_sys_ia32_pread64+0xf0/0x150 [ 236.996572][ T6037] ia32_sys_call+0x963/0x4310 [ 236.996744][ T6037] __do_fast_syscall_32+0xb0/0x150 [ 236.996914][ T6037] do_fast_syscall_32+0x38/0x80 [ 236.997077][ T6037] do_SYSENTER_32+0x1f/0x30 [ 236.997236][ T6037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.997386][ T6037] [ 236.997420][ T6037] Uninit was created at: [ 236.997611][ T6037] __kmalloc_cache_noprof+0x8f5/0x16b0 [ 236.997760][ T6037] pctv452e_i2c_msg+0x98/0x8f0 [ 236.997916][ T6037] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 236.998066][ T6037] __i2c_transfer+0xecd/0x3110 [ 236.998195][ T6037] i2c_transfer+0x300/0x4b0 [ 236.998312][ T6037] i2c_transfer_buffer_flags+0x138/0x200 [ 236.998448][ T6037] i2cdev_read+0x1b2/0x3c0 [ 236.998568][ T6037] vfs_read+0x27c/0xf90 [ 236.998736][ T6037] ksys_pread64+0x1d6/0x2a0 [ 236.998848][ T6037] __ia32_sys_ia32_pread64+0xf0/0x150 [ 236.999010][ T6037] ia32_sys_call+0x963/0x4310 [ 236.999187][ T6037] __do_fast_syscall_32+0xb0/0x150 [ 236.999358][ T6037] do_fast_syscall_32+0x38/0x80 [ 236.999524][ T6037] do_SYSENTER_32+0x1f/0x30 [ 236.999696][ T6037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.999853][ T6037] [ 236.999937][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(none) [ 237.000072][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.000152][ T6037] ===================================================== [ 237.000200][ T6037] Disabling lock debugging due to kernel taint [ 237.000259][ T6037] Kernel panic - not syncing: kmsan.panic set ... [ 237.253453][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.3.14 Tainted: G B syzkaller #0 PREEMPT(none) [ 237.264343][ T6037] Tainted: [B]=BAD_PAGE [ 237.268596][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.278819][ T6037] Call Trace: [ 237.282216][ T6037] [ 237.285249][ T6037] __dump_stack+0x26/0x30 [ 237.289816][ T6037] dump_stack_lvl+0x53/0x270 [ 237.294633][ T6037] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.300670][ T6037] dump_stack+0x1e/0x25 [ 237.305068][ T6037] vpanic+0x435/0xd30 [ 237.309317][ T6037] panic+0x15d/0x160 [ 237.313468][ T6037] kmsan_report+0x31c/0x320 [ 237.318250][ T6037] ? __msan_warning+0x1b/0x30 [ 237.323099][ T6037] ? hex_string+0x681/0x740 [ 237.327802][ T6037] ? pointer+0x2c7/0x1bd0 [ 237.332424][ T6037] ? vsnprintf+0xf8a/0x1bd0 [ 237.337181][ T6037] ? vscnprintf+0x6d/0x120 [ 237.341800][ T6037] ? printk_sprint+0x53/0x5c0 [ 237.346712][ T6037] ? vprintk_store+0xbb9/0x1530 [ 237.351749][ T6037] ? vprintk_emit+0x21a/0xb60 [ 237.356796][ T6037] ? vprintk_default+0x3f/0x50 [ 237.361859][ T6037] ? vprintk+0x36/0x50 [ 237.366206][ T6037] ? _printk+0x17e/0x1b0 [ 237.370666][ T6037] ? pctv452e_i2c_msg+0x82a/0x8f0 [ 237.375925][ T6037] ? pctv452e_i2c_xfer+0x2e6/0x4c0 [ 237.381435][ T6037] ? __i2c_transfer+0xecd/0x3110 [ 237.386700][ T6037] ? i2c_transfer+0x300/0x4b0 [ 237.391556][ T6037] ? i2c_transfer_buffer_flags+0x138/0x200 [ 237.397586][ T6037] ? i2cdev_read+0x1b2/0x3c0 [ 237.402361][ T6037] ? vfs_read+0x27c/0xf90 [ 237.407011][ T6037] ? ksys_pread64+0x1d6/0x2a0 [ 237.411886][ T6037] ? __ia32_sys_ia32_pread64+0xf0/0x150 [ 237.417810][ T6037] ? ia32_sys_call+0x963/0x4310 [ 237.422927][ T6037] ? __do_fast_syscall_32+0xb0/0x150 [ 237.428447][ T6037] ? do_fast_syscall_32+0x38/0x80 [ 237.433791][ T6037] ? do_SYSENTER_32+0x1f/0x30 [ 237.438785][ T6037] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.445626][ T6037] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.451699][ T6037] ? format_decode+0x1131/0x1160 [ 237.457009][ T6037] ? filter_irq_stacks+0x49/0x190 [ 237.462343][ T6037] ? stack_depot_save_flags+0x35/0x7b0 [ 237.468058][ T6037] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.474094][ T6037] ? kmsan_get_metadata+0xfb/0x160 [ 237.479527][ T6037] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 237.486398][ T6037] ? kmsan_get_metadata+0xfb/0x160 [ 237.492026][ T6037] __msan_warning+0x1b/0x30 [ 237.496748][ T6037] hex_string+0x681/0x740 [ 237.501353][ T6037] pointer+0x2c7/0x1bd0 [ 237.505716][ T6037] ? kmsan_get_metadata+0xfb/0x160 [ 237.511211][ T6037] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.517425][ T6037] vsnprintf+0xf8a/0x1bd0 [ 237.521990][ T6037] vscnprintf+0x6d/0x120 [ 237.526551][ T6037] printk_sprint+0x53/0x5c0 [ 237.531759][ T6037] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.537844][ T6037] vprintk_store+0xbb9/0x1530 [ 237.542953][ T6037] ? kmsan_get_metadata+0xfb/0x160 [ 237.548556][ T6037] vprintk_emit+0x21a/0xb60 [ 237.553381][ T6037] vprintk_default+0x3f/0x50 [ 237.558351][ T6037] vprintk+0x36/0x50 [ 237.562474][ T6037] _printk+0x17e/0x1b0 [ 237.566840][ T6037] pctv452e_i2c_msg+0x82a/0x8f0 [ 237.571928][ T6037] ? kmsan_get_metadata+0xfb/0x160 [ 237.577262][ T6037] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 237.582435][ T6037] ? __pfx_pctv452e_i2c_xfer+0x10/0x10 [ 237.588100][ T6037] __i2c_transfer+0xecd/0x3110 [ 237.593041][ T6037] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 237.599694][ T6037] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 237.605625][ T6037] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 237.612589][ T6037] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 237.618605][ T6037] i2c_transfer+0x300/0x4b0 [ 237.623301][ T6037] i2c_transfer_buffer_flags+0x138/0x200 [ 237.629149][ T6037] i2cdev_read+0x1b2/0x3c0 [ 237.633784][ T6037] ? __pfx_i2cdev_read+0x10/0x10 [ 237.638907][ T6037] vfs_read+0x27c/0xf90 [ 237.643288][ T6037] ? __fget_files+0x3b9/0x4a0 [ 237.648254][ T6037] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.654318][ T6037] ksys_pread64+0x1d6/0x2a0 [ 237.659052][ T6037] __ia32_sys_ia32_pread64+0xf0/0x150 [ 237.664768][ T6037] ia32_sys_call+0x963/0x4310 [ 237.669686][ T6037] __do_fast_syscall_32+0xb0/0x150 [ 237.675075][ T6037] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 237.681034][ T6037] do_fast_syscall_32+0x38/0x80 [ 237.686111][ T6037] do_SYSENTER_32+0x1f/0x30 [ 237.690944][ T6037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.697484][ T6037] RIP: 0023:0xf707d539 [ 237.701697][ T6037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.721482][ T6037] RSP: 002b:00000000f542b55c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 237.730097][ T6037] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000000 [ 237.738198][ T6037] RDX: 00000000000000ea RSI: 0000000000000000 RDI: 0000000000000000 [ 237.746295][ T6037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.754393][ T6037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.762509][ T6037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.770650][ T6037] [ 237.773979][ T6037] Kernel Offset: disabled [ 237.778401][ T6037] Rebooting in 86400 seconds..