last executing test programs: 10.114878597s ago: executing program 0 (id=8): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 9.366444694s ago: executing program 4 (id=5): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000020000000005000000"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 9.106800417s ago: executing program 0 (id=10): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x321, 0x0, 0x6, 0x81, 0x3, @random="061ff80419bc"}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xcf46, 0x0, 0x0}, {[0x5, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0}) unshare(0xe060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 8.372001208s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x9) 8.09610583s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 7.275420716s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x440c5}, 0x20000010) 7.178166105s ago: executing program 3 (id=13): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x6d, 0x29, 0x32, 0xe00}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) 6.919116139s ago: executing program 2 (id=14): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000290000003e"], 0x18}, 0x440e0) 6.410712236s ago: executing program 3 (id=15): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000140)=0x80000001, 0x4) 6.255509437s ago: executing program 2 (id=16): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 5.882638343s ago: executing program 1 (id=17): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$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") sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x0, 0xff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x7, 0x2b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000380)=[{r0, 0x508a}], 0x1, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) semget$private(0x0, 0x207, 0x0) chroot(0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) 5.650670783s ago: executing program 3 (id=18): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000696000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 5.556345385s ago: executing program 2 (id=19): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 4.323623019s ago: executing program 2 (id=20): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x63, 0x8bea, 0x1, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4}) 4.113666659s ago: executing program 4 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xb, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 3.823785443s ago: executing program 0 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8010200}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 3.378423561s ago: executing program 2 (id=23): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x17}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) 2.791006779s ago: executing program 0 (id=24): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002000, 0x1, {0x1}}) io_uring_enter(r0, 0x1, 0xeed, 0x4d, 0x0, 0x0) 2.14085721s ago: executing program 4 (id=25): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8dfd8a425e6772c02c8263b3f04f6fefd5e54ceb10de0fae", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x44851}, 0x4c01c) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f7ad94a3", 0x4}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40840) 1.689165937s ago: executing program 0 (id=26): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(crc32c-generic,ecb(des3_ede))\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001"], 0x24}}, 0x0) 743.980251ms ago: executing program 2 (id=27): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0xa, 0x6, 0x1000, 0x80}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40"], 0x0) 661.796805ms ago: executing program 4 (id=28): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x9, 0x2, &(0x7f0000000040)={0xb, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 0s ago: executing program 0 (id=29): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 188.872717][ T5752] cgroup: Unknown subsys name 'net' [ 189.012844][ T5752] cgroup: Unknown subsys name 'cpuset' [ 189.028613][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 195.573819][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.290980][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.301146][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.312049][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.332657][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.344465][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.351949][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.361443][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.380695][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.404936][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.419821][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.488997][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.498597][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.507959][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.521633][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.547627][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.555189][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.586208][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.596581][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.611362][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.623275][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.674723][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.690024][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.700743][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.727267][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.741319][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.263750][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 202.348723][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 202.387530][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 202.488252][ T5071] Bluetooth: hci1: command tx timeout [ 202.494330][ T5775] Bluetooth: hci0: command tx timeout [ 202.648123][ T5775] Bluetooth: hci2: command tx timeout [ 202.728346][ T5775] Bluetooth: hci3: command tx timeout [ 202.766821][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 202.808104][ T5775] Bluetooth: hci4: command tx timeout [ 202.870169][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 203.554723][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.580956][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.598516][ T5779] bridge_slave_0: entered allmulticast mode [ 203.619555][ T5779] bridge_slave_0: entered promiscuous mode [ 203.651373][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.668661][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.676353][ T5770] bridge_slave_0: entered allmulticast mode [ 203.711721][ T5770] bridge_slave_0: entered promiscuous mode [ 203.731384][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.758415][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.785627][ T5779] bridge_slave_1: entered allmulticast mode [ 203.797006][ T5779] bridge_slave_1: entered promiscuous mode [ 203.888709][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.896262][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.929371][ T5770] bridge_slave_1: entered allmulticast mode [ 203.939555][ T5770] bridge_slave_1: entered promiscuous mode [ 204.112068][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.129121][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.167396][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.251088][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.259064][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.266534][ T5772] bridge_slave_0: entered allmulticast mode [ 204.276714][ T5772] bridge_slave_0: entered promiscuous mode [ 204.299346][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.319738][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.388986][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.396707][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.404498][ T5772] bridge_slave_1: entered allmulticast mode [ 204.413692][ T5772] bridge_slave_1: entered promiscuous mode [ 204.460256][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.499370][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.506923][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.515338][ T5778] bridge_slave_0: entered allmulticast mode [ 204.524274][ T5778] bridge_slave_0: entered promiscuous mode [ 204.568702][ T5071] Bluetooth: hci1: command tx timeout [ 204.574748][ T5775] Bluetooth: hci0: command tx timeout [ 204.625535][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.633548][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.641717][ T5781] bridge_slave_0: entered allmulticast mode [ 204.651097][ T5781] bridge_slave_0: entered promiscuous mode [ 204.664147][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.671776][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.679926][ T5778] bridge_slave_1: entered allmulticast mode [ 204.689319][ T5778] bridge_slave_1: entered promiscuous mode [ 204.728292][ T5775] Bluetooth: hci2: command tx timeout [ 204.744767][ T5770] team0: Port device team_slave_0 added [ 204.788932][ T5779] team0: Port device team_slave_0 added [ 204.795392][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.803788][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.811578][ T5775] Bluetooth: hci3: command tx timeout [ 204.815717][ T5781] bridge_slave_1: entered allmulticast mode [ 204.826193][ T5781] bridge_slave_1: entered promiscuous mode [ 204.872892][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.888337][ T5775] Bluetooth: hci4: command tx timeout [ 204.895850][ T5770] team0: Port device team_slave_1 added [ 204.937767][ T5779] team0: Port device team_slave_1 added [ 205.006781][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.108795][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.149044][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.156130][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.182453][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.233156][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.252156][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.291448][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.299171][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.325774][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.355530][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.362773][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.390539][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.411145][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.456080][ T5772] team0: Port device team_slave_0 added [ 205.483524][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.490932][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.517372][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.589677][ T5772] team0: Port device team_slave_1 added [ 205.652944][ T5778] team0: Port device team_slave_0 added [ 205.670353][ T5778] team0: Port device team_slave_1 added [ 205.743639][ T5781] team0: Port device team_slave_0 added [ 205.808030][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.815147][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.841618][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.865580][ T5781] team0: Port device team_slave_1 added [ 205.930989][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.938647][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.965131][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.031163][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.038630][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.065459][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.093255][ T5770] hsr_slave_0: entered promiscuous mode [ 206.102464][ T5770] hsr_slave_1: entered promiscuous mode [ 206.186732][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.194379][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.220943][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.253743][ T5779] hsr_slave_0: entered promiscuous mode [ 206.262979][ T5779] hsr_slave_1: entered promiscuous mode [ 206.271345][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 206.277214][ T5779] Cannot create hsr debugfs directory [ 206.289331][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.296406][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.323080][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.440272][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.447379][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.474255][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.648214][ T5775] Bluetooth: hci0: command tx timeout [ 206.648256][ T5071] Bluetooth: hci1: command tx timeout [ 206.705046][ T5772] hsr_slave_0: entered promiscuous mode [ 206.713998][ T5772] hsr_slave_1: entered promiscuous mode [ 206.722426][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 206.728643][ T5772] Cannot create hsr debugfs directory [ 206.809638][ T5775] Bluetooth: hci2: command tx timeout [ 206.888249][ T5775] Bluetooth: hci3: command tx timeout [ 206.938040][ T5778] hsr_slave_0: entered promiscuous mode [ 206.946970][ T5778] hsr_slave_1: entered promiscuous mode [ 206.955447][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 206.961456][ T5778] Cannot create hsr debugfs directory [ 206.968155][ T5775] Bluetooth: hci4: command tx timeout [ 207.126649][ T5781] hsr_slave_0: entered promiscuous mode [ 207.136327][ T5781] hsr_slave_1: entered promiscuous mode [ 207.145471][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 207.151568][ T5781] Cannot create hsr debugfs directory [ 208.207504][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.229433][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.266530][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.343045][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.470589][ T5779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.544243][ T5779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.586938][ T5779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.640546][ T5779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.728508][ T5775] Bluetooth: hci0: command tx timeout [ 208.728558][ T5071] Bluetooth: hci1: command tx timeout [ 208.796686][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.824417][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.888446][ T5775] Bluetooth: hci2: command tx timeout [ 208.896039][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.944596][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.969943][ T5775] Bluetooth: hci3: command tx timeout [ 209.059269][ T5775] Bluetooth: hci4: command tx timeout [ 209.193486][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.220379][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.304918][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.334650][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.659080][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.696559][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.722902][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.815452][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.872049][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.066453][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.211719][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.219337][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.257737][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.309239][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.316616][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.503680][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.600964][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.608568][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.702663][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.710350][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.784927][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.839539][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.133246][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.186836][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.276300][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.283930][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.398924][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.406544][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.429419][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.436963][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.643598][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.651162][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.669675][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.893550][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.013352][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.021003][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.146612][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.154284][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.209600][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.987423][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.172260][ T5770] veth0_vlan: entered promiscuous mode [ 213.319053][ T5770] veth1_vlan: entered promiscuous mode [ 213.785722][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.826461][ T5770] veth0_macvtap: entered promiscuous mode [ 213.923761][ T5770] veth1_macvtap: entered promiscuous mode [ 214.150570][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.230624][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.295382][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.352138][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.433364][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.455355][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.475476][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.586882][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.691609][ T5778] veth0_vlan: entered promiscuous mode [ 214.874549][ T5778] veth1_vlan: entered promiscuous mode [ 215.275521][ T5772] veth0_vlan: entered promiscuous mode [ 215.297595][ T5781] veth0_vlan: entered promiscuous mode [ 215.314339][ T5779] veth0_vlan: entered promiscuous mode [ 215.433505][ T5772] veth1_vlan: entered promiscuous mode [ 215.515413][ T5779] veth1_vlan: entered promiscuous mode [ 215.576634][ T5781] veth1_vlan: entered promiscuous mode [ 215.621204][ T5778] veth0_macvtap: entered promiscuous mode [ 215.731101][ T5778] veth1_macvtap: entered promiscuous mode [ 215.967679][ T5772] veth0_macvtap: entered promiscuous mode [ 216.065665][ T5781] veth0_macvtap: entered promiscuous mode [ 216.091609][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.105650][ T5779] veth0_macvtap: entered promiscuous mode [ 216.133380][ T5772] veth1_macvtap: entered promiscuous mode [ 216.211046][ T5781] veth1_macvtap: entered promiscuous mode [ 216.245952][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.261727][ T5779] veth1_macvtap: entered promiscuous mode [ 216.360961][ T1126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.420887][ T1126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.434411][ T1126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.498414][ T1126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.567684][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.605330][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.672787][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.771511][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.832862][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.892389][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.954508][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.972470][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.030026][ T1330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.061600][ T1330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.141809][ T1330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.183195][ T1330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.225382][ T1330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.288787][ T1330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.365640][ T1330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.412489][ T1330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.451533][ T1330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.540489][ T1330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.539343][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.547400][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.937242][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.976735][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.634951][ T5770] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 220.849061][ T2141] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 221.090790][ T2141] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 221.135243][ T2141] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 221.178296][ T2141] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.213064][ T2141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.523537][ T5890] usb 1-1: USB disconnect, device number 2 [ 223.414344][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.433315][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.790992][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.833992][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.047204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.074307][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.288913][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.296981][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.814227][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.867210][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.958380][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.966440][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.433849][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.479418][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.632841][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.684703][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.044352][ T5996] loop1: detected capacity change from 0 to 128 [ 230.987963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 231.423473][ T6010] syzkaller0: entered promiscuous mode [ 231.504696][ T6010] syzkaller0: entered allmulticast mode [ 234.858527][ T5821] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 234.893294][ T2141] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 235.036464][ T5821] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 235.056531][ T5821] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 235.098186][ T2141] usb 5-1: Using ep0 maxpacket: 32 [ 235.114466][ T5821] usb 3-1: config 201 has no interface number 0 [ 235.123551][ T5821] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 235.162057][ T5821] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.178578][ T5821] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.200221][ T2141] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 235.206253][ T5821] usb 3-1: config 201 interface 249 has no altsetting 0 [ 235.260945][ T2141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.306389][ T5821] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 235.321648][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.332860][ T5821] usb 3-1: Product: syz [ 235.346026][ T5821] usb 3-1: Manufacturer: syz [ 235.364771][ T2141] usb 5-1: config 0 descriptor?? [ 235.383685][ T5821] usb 3-1: SerialNumber: syz [ 235.537990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 235.733879][ T2141] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 235.739323][ T5821] ath6kl: Failed to submit usb control message: -71 [ 235.790386][ T5821] ath6kl: unable to send the bmi data to the device: -71 [ 235.831965][ T5821] ath6kl: Unable to send get target info: -71 [ 235.846346][ T2141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.865982][ T5821] ath6kl: Failed to init ath6kl core: -71 [ 235.929544][ T5821] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 235.948241][ T6030] ===================================================== [ 235.955563][ T6030] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x2474/0x3120 [ 235.963315][ T6030] __i2c_smbus_xfer+0x2474/0x3120 [ 235.968607][ T6030] i2c_smbus_xfer+0x2d8/0x480 [ 235.973401][ T6030] i2cdev_ioctl_smbus+0x4a1/0x660 [ 235.978691][ T6030] compat_i2cdev_ioctl+0x48f/0xb40 [ 235.983952][ T6030] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 235.989928][ T6030] ia32_sys_call+0x2854/0x4360 [ 235.994809][ T6030] __do_fast_syscall_32+0x17f/0x3f0 [ 236.004915][ T6030] do_fast_syscall_32+0x37/0x80 [ 236.011060][ T6030] do_SYSENTER_32+0x1f/0x30 [ 236.015838][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.022538][ T6030] [ 236.025046][ T6030] Local variable msgbuf1.i created at: [ 236.030727][ T6030] __i2c_smbus_xfer+0x853/0x3120 [ 236.035814][ T6030] i2c_smbus_xfer+0x2d8/0x480 [ 236.040802][ T6030] [ 236.043264][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT(full) [ 236.052744][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.063255][ T6030] ===================================================== [ 236.070581][ T6030] Disabling lock debugging due to kernel taint [ 236.099343][ T6030] Kernel panic - not syncing: kmsan.panic set ... [ 236.106010][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.4.28 Tainted: G B syzkaller #0 PREEMPT(full) [ 236.116936][ T6030] Tainted: [B]=BAD_PAGE [ 236.121215][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.131465][ T6030] Call Trace: [ 236.134877][ T6030] [ 236.137929][ T6030] __dump_stack+0x26/0x30 [ 236.142476][ T6030] dump_stack_lvl+0x50/0x1c0 [ 236.147286][ T6030] ? dump_stack+0x12/0x25 [ 236.151839][ T6030] dump_stack+0x1e/0x25 [ 236.156222][ T6030] vpanic+0x7b4/0x1430 [ 236.160564][ T6030] panic+0x15d/0x160 [ 236.164754][ T6030] kmsan_report+0x31a/0x320 [ 236.169532][ T6030] ? __msan_warning+0x1b/0x30 [ 236.174457][ T6030] ? __i2c_smbus_xfer+0x2474/0x3120 [ 236.179875][ T6030] ? i2c_smbus_xfer+0x2d8/0x480 [ 236.184909][ T6030] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 236.190362][ T6030] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 236.195878][ T6030] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 236.201848][ T6030] ? ia32_sys_call+0x2854/0x4360 [ 236.206975][ T6030] ? __do_fast_syscall_32+0x17f/0x3f0 [ 236.212610][ T6030] ? do_fast_syscall_32+0x37/0x80 [ 236.217882][ T6030] ? do_SYSENTER_32+0x1f/0x30 [ 236.222794][ T6030] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.229607][ T6030] ? az6027_i2c_xfer+0x2bd7/0x2c30 [ 236.234982][ T6030] ? kmsan_get_metadata+0xf1/0x160 [ 236.240264][ T6030] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 236.245776][ T6030] ? kmsan_get_metadata+0xf1/0x160 [ 236.251053][ T6030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 236.257052][ T6030] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 236.262473][ T6030] __msan_warning+0x1b/0x30 [ 236.267224][ T6030] __i2c_smbus_xfer+0x2474/0x3120 [ 236.272474][ T6030] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 236.278789][ T6030] ? rt_mutex_lock+0x3d/0x70 [ 236.283603][ T6030] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 236.289606][ T6030] i2c_smbus_xfer+0x2d8/0x480 [ 236.294482][ T6030] i2cdev_ioctl_smbus+0x4a1/0x660 [ 236.299761][ T6030] compat_i2cdev_ioctl+0x48f/0xb40 [ 236.305131][ T6030] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 236.311046][ T6030] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 236.316878][ T6030] ? fpregs_restore_userregs+0x213/0x3e0 [ 236.322877][ T6030] ? kmsan_get_metadata+0xf1/0x160 [ 236.328173][ T6030] ? kmsan_get_metadata+0xf1/0x160 [ 236.333579][ T6030] ia32_sys_call+0x2854/0x4360 [ 236.338535][ T6030] __do_fast_syscall_32+0x17f/0x3f0 [ 236.343997][ T6030] do_fast_syscall_32+0x37/0x80 [ 236.349071][ T6030] do_SYSENTER_32+0x1f/0x30 [ 236.353788][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.360350][ T6030] RIP: 0023:0xf7f77f6c [ 236.364565][ T6030] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 236.384512][ T6030] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 236.393212][ T6030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 236.401353][ T6030] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.409481][ T6030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.417628][ T6030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.425766][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.433919][ T6030] [ 236.437255][ T6030] Kernel Offset: disabled [ 236.441660][ T6030] Rebooting in 86400 seconds..