last executing test programs: 18.029954758s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x4bfa, 0x9) 15.156584779s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) sendmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="316b05098b494849dc95a847a573", 0xe}, {&(0x7f0000001380)="ad40def61413129ac9a95168265edd830a28aa01d81f23477c62488c42edb1be04f482a7b174dc433ac33375d9cda91ec852c1ccfc64627a80f22d18182f8880", 0x40}, {&(0x7f00000013c0)="b3ee88015cf1decef48e04004ad278ef13377a63dfaccd26957717fe0a3bd3c8996f20e1d7c800d89d", 0x29}, {&(0x7f0000001400)="3b488d2ba7194613ba24bac800f987e64483eba7bcb008957a8b74495e9bc5ac8be72f16952e93551e8ac9933ec341067bab09983698f1a98f5c9865ff7f339be8e01b55210d252ca1cf5e14eccf5e646104857681e261bf4d3c1c0f27902fd4ada29d4b5a9785679dda635fdbb207423f5aeab5543ee30b9b311672bfa3399aa992bc0e765468ea2b6ce7b7d4500c3428dfb77a0fbaecc03b78f74ca7dec416", 0xa0}, {0x0}], 0x6, &(0x7f0000001640)=ANY=[@ANYBLOB="400000000000000011000000050000007138b537a16dfb516d61f1c8a8930e001ad0b81488348b77b7f8dd1d2aabd6e6ef1a960000000000000000000000000013726b3ebab13ac8c9cf2c644e51064463a41c45819705672a95ffab6feea08d46db228ec1a39154df0e50133cb3dc081fce0bbf09b8cdf95e9e58d6a0fc1588bbcad9805ec56b0296794a5fb94ceb290d655253d492e08e2fe790a2aeb5867468f3ae2a271bde30cb675f015fd9682e5340d2e7581264a03c489d9db94e177e32d01c1fe9d930ab8a5beacb49ac63a0013387a0c4e6b0a9253d09fad387fb12bf1ee0c93b59b8d9bf635ece5696182bd2d18d64322d11837a9d3db9b3a1100aa7a82281886217842c3071fc9b40dae0dbdf0e71dfc79edeaa004c8981f3cb97a1b8ee1d10431e297b940779720d1806d22a5e3f65b146bdce713d9745ff44393dad68f3cbc7d0de930997914c85e8"], 0x40}, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vlan0\x00', 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 12.630294241s ago: executing program 3 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2202, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b80)={0x48, r5, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x228b54fafcc33394}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4008010) 10.912814426s ago: executing program 0 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x5}, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000011000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40880000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200000000000000000006e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x880}, 0x40800) 10.367855472s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905824349"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.245572607s ago: executing program 0 (id=8): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect(r0, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80) 3.850972105s ago: executing program 1 (id=9): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.438061882s ago: executing program 3 (id=10): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0xd, 0x0, 0x0, 0x0}, {0x50, 0x8800, 0x0, 0x0}], 0x2}) 3.272158739s ago: executing program 2 (id=3): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x10, 0x86d, 0x1, 0x2, 0xd59f80, 0x19ee, 0x7fffffff, 0x1000, 0x3, 0x7, 0x2800, 0x9, 0x43e, 0x8002, 0xb, 0x0, {0x8, 0xffffff7f}, 0xd0, 0x9}}) 2.976586003s ago: executing program 4 (id=5): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x20bb, 0x8000000, 0x0, 0xd00, 0x7, 0x0, 0x5, 0x7, 0x2, 0xff7fffffffffffff], 0x0, 0x2200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.476538013s ago: executing program 2 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0x7, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x2, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffc, 0x93, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20004000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100000000000001, 0x1000000, 0x16a0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffe, 0x80]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x5453, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 1.694766643s ago: executing program 4 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.135580223s ago: executing program 3 (id=13): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0xd7, 0x4, &(0x7f00000000c0)={0x1c, "bfb4baabb1f028122ca3ff62dc952e634ff9d4bde4ce08508f362257d5c1ef7226"}}) 705.473848ms ago: executing program 4 (id=14): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 284.843822ms ago: executing program 1 (id=15): syz_usb_connect(0x2, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat(0xffffffffffffff9c, 0x0, 0x2c43, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r4, 0x0, 0x0, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=16): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x5, 0x0, 0x0, 0x0}, {0xc, 0x800, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 188.429104][ T5558] cgroup: Unknown subsys name 'net' [ 188.560000][ T5558] cgroup: Unknown subsys name 'cpuset' [ 188.578434][ T5558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 194.847958][ T5558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.581943][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.593937][ T5579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.610444][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.626216][ T5583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.638138][ T5583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.648022][ T5583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.656131][ T5583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.667479][ T5583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.678045][ T5583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.698624][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.707701][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.716419][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.728206][ T4876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.747090][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.758882][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.869150][ T5579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.880266][ T5579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.890163][ T5579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.909266][ T5579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.922148][ T5579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.945580][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.959952][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.971309][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.999338][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.018130][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.772866][ T5582] Bluetooth: hci0: command tx timeout [ 202.849847][ T5582] Bluetooth: hci2: command tx timeout [ 202.855588][ T5586] Bluetooth: hci1: command tx timeout [ 203.009927][ T5586] Bluetooth: hci3: command tx timeout [ 203.090975][ T5586] Bluetooth: hci4: command tx timeout [ 204.701875][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.708547][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.860569][ T5586] Bluetooth: hci0: command tx timeout [ 204.930948][ T5586] Bluetooth: hci1: command tx timeout [ 204.936695][ T5582] Bluetooth: hci2: command tx timeout [ 205.091486][ T5582] Bluetooth: hci3: command tx timeout [ 205.171196][ T5582] Bluetooth: hci4: command tx timeout [ 205.852422][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.876819][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.911508][ T5590] bridge_slave_0: entered allmulticast mode [ 205.942304][ T5590] bridge_slave_0: entered promiscuous mode [ 206.034163][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.042438][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.055186][ T5590] bridge_slave_1: entered allmulticast mode [ 206.066196][ T5590] bridge_slave_1: entered promiscuous mode [ 206.152853][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.160624][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.168291][ T5576] bridge_slave_0: entered allmulticast mode [ 206.178850][ T5576] bridge_slave_0: entered promiscuous mode [ 206.370311][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.378998][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.388372][ T5576] bridge_slave_1: entered allmulticast mode [ 206.401246][ T5576] bridge_slave_1: entered promiscuous mode [ 206.476451][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.486671][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.494771][ T5589] bridge_slave_0: entered allmulticast mode [ 206.504797][ T5589] bridge_slave_0: entered promiscuous mode [ 206.639094][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.651260][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.664106][ T5578] bridge_slave_0: entered allmulticast mode [ 206.674483][ T5578] bridge_slave_0: entered promiscuous mode [ 206.700687][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.712179][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.722945][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.731527][ T5589] bridge_slave_1: entered allmulticast mode [ 206.743273][ T5589] bridge_slave_1: entered promiscuous mode [ 206.800413][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.808645][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.817390][ T5577] bridge_slave_0: entered allmulticast mode [ 206.828638][ T5577] bridge_slave_0: entered promiscuous mode [ 206.855186][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.865070][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.873280][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.881097][ T5578] bridge_slave_1: entered allmulticast mode [ 206.889921][ T5578] bridge_slave_1: entered promiscuous mode [ 206.908246][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.939879][ T5582] Bluetooth: hci0: command tx timeout [ 206.949722][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.957579][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.965252][ T5577] bridge_slave_1: entered allmulticast mode [ 206.974327][ T5577] bridge_slave_1: entered promiscuous mode [ 206.993019][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.011269][ T5582] Bluetooth: hci2: command tx timeout [ 207.011466][ T5586] Bluetooth: hci1: command tx timeout [ 207.101147][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.171216][ T5586] Bluetooth: hci3: command tx timeout [ 207.230198][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.249808][ T5586] Bluetooth: hci4: command tx timeout [ 207.278520][ T5576] team0: Port device team_slave_0 added [ 207.293838][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.312393][ T5590] team0: Port device team_slave_0 added [ 207.352996][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.371551][ T5576] team0: Port device team_slave_1 added [ 207.385525][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.403186][ T5590] team0: Port device team_slave_1 added [ 207.443442][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.538310][ T5589] team0: Port device team_slave_0 added [ 207.677654][ T5589] team0: Port device team_slave_1 added [ 207.712755][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.720350][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.746768][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.766294][ T5578] team0: Port device team_slave_0 added [ 207.774715][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.782253][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.808952][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.855705][ T5577] team0: Port device team_slave_0 added [ 207.864087][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.871603][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.898040][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.917749][ T5578] team0: Port device team_slave_1 added [ 207.926067][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.933569][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.959889][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.012705][ T5577] team0: Port device team_slave_1 added [ 208.083968][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.091209][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.117493][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.197239][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.204720][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.231810][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.246322][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.253738][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.280034][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.322607][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.329832][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.356328][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.376029][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.383337][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.409713][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.469220][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.476825][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.503211][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.658483][ T5576] hsr_slave_0: entered promiscuous mode [ 208.667534][ T5576] hsr_slave_1: entered promiscuous mode [ 208.698652][ T5590] hsr_slave_0: entered promiscuous mode [ 208.707731][ T5590] hsr_slave_1: entered promiscuous mode [ 208.716344][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 208.722471][ T5590] Cannot create hsr debugfs directory [ 208.840351][ T5589] hsr_slave_0: entered promiscuous mode [ 208.851093][ T5589] hsr_slave_1: entered promiscuous mode [ 208.859680][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 208.865573][ T5589] Cannot create hsr debugfs directory [ 209.019957][ T5586] Bluetooth: hci0: command tx timeout [ 209.023853][ T5578] hsr_slave_0: entered promiscuous mode [ 209.034710][ T5578] hsr_slave_1: entered promiscuous mode [ 209.042524][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 209.048378][ T5578] Cannot create hsr debugfs directory [ 209.088885][ T5577] hsr_slave_0: entered promiscuous mode [ 209.094826][ T5586] Bluetooth: hci1: command tx timeout [ 209.100290][ T5586] Bluetooth: hci2: command tx timeout [ 209.109402][ T5577] hsr_slave_1: entered promiscuous mode [ 209.117465][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 209.123484][ T5577] Cannot create hsr debugfs directory [ 209.250450][ T5586] Bluetooth: hci3: command tx timeout [ 209.329820][ T5586] Bluetooth: hci4: command tx timeout [ 210.516406][ T5576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.556858][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.569171][ T5576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.587429][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.598380][ T5576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.624967][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.650386][ T5576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.671562][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.801031][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.823486][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.835020][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.853804][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.879945][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.902482][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.931492][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.955373][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.128334][ T5589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.148890][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.176527][ T5589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.203171][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.213909][ T5589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.233576][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.274520][ T5589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.295314][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.602549][ T5578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.623263][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.654178][ T5578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.677699][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.690995][ T5578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.712077][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.761995][ T5578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.788259][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.005971][ T5577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.026491][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.070730][ T5577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.094093][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.104825][ T5577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.124805][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.152927][ T5577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.176520][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.342776][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.466798][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.633329][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.725030][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.732514][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.758293][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.821877][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.829271][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.899583][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.907156][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.970628][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.048922][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.056380][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.335838][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.397802][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.441641][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.449206][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.614940][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.622409][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.692578][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.850988][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.858590][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.936736][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.064643][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.072309][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.326011][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.459107][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.466756][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.656898][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.664603][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.058663][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.617095][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.037717][ T5590] veth0_vlan: entered promiscuous mode [ 218.105622][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.312712][ T5590] veth1_vlan: entered promiscuous mode [ 218.450346][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.585008][ T5576] veth0_vlan: entered promiscuous mode [ 218.813575][ T5576] veth1_vlan: entered promiscuous mode [ 218.925571][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.970704][ T5590] veth0_macvtap: entered promiscuous mode [ 219.038550][ T5590] veth1_macvtap: entered promiscuous mode [ 219.245494][ T5578] veth0_vlan: entered promiscuous mode [ 219.357404][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.424993][ T5578] veth1_vlan: entered promiscuous mode [ 219.453829][ T5576] veth0_macvtap: entered promiscuous mode [ 219.484854][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.558822][ T5576] veth1_macvtap: entered promiscuous mode [ 219.633230][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.642732][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.675292][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.685106][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.889409][ T5577] veth0_vlan: entered promiscuous mode [ 219.962086][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.100388][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.109088][ T5589] veth0_vlan: entered promiscuous mode [ 220.146087][ T5578] veth0_macvtap: entered promiscuous mode [ 220.183010][ T5577] veth1_vlan: entered promiscuous mode [ 220.245441][ T1151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.261789][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.285105][ T5578] veth1_macvtap: entered promiscuous mode [ 220.315144][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.327977][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.414240][ T5589] veth1_vlan: entered promiscuous mode [ 220.608137][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.718143][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.828572][ T5577] veth0_macvtap: entered promiscuous mode [ 220.878098][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.898004][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.957371][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.973844][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.991325][ T5577] veth1_macvtap: entered promiscuous mode [ 221.202175][ T5589] veth0_macvtap: entered promiscuous mode [ 221.288249][ T5589] veth1_macvtap: entered promiscuous mode [ 221.536616][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.591557][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.679331][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.811609][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.836988][ T1337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.864293][ T198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.990566][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.016975][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.083955][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.138873][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.167370][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.209987][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.544318][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.598829][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.886255][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.925602][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.503959][ T5590] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 227.397676][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.407619][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.923850][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.966006][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.537438][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.620832][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.328021][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.540902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 230.950477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 232.023009][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.036681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.086693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.353702][ T5852] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 234.466476][ T5854] Zero length message leads to an empty skb [ 234.489949][ T5852] syzkaller0: entered promiscuous mode [ 234.497821][ T5852] syzkaller0: entered allmulticast mode [ 235.252657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 235.431998][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 237.710346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 237.812635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 238.119643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 238.222305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 238.577043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 238.939802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 239.039704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 240.628562][ T5680] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 240.945717][ T5703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.981186][ T5838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.002378][ T5703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.026708][ T5838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.355937][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.406034][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.632443][ T5680] usb 2-1: device descriptor read/64, error -71 [ 241.862021][ T5677] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 241.911921][ T5680] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.071671][ T5677] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.096320][ T5677] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 242.106123][ T5677] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 242.131956][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 242.163849][ T5680] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 242.195560][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.206584][ T5680] usb 2-1: config 0 has no interface number 0 [ 242.230655][ T5680] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.257812][ T5677] usb 4-1: config 0 descriptor?? [ 242.272114][ T5680] usb 2-1: config 0 interface 85 has no altsetting 0 [ 242.328489][ T5680] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 242.342765][ T5677] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 242.358151][ T5869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 242.362999][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.387152][ T5677] dvb-usb: bulk message failed: -22 (3/0) [ 242.426306][ T5677] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 242.461337][ T5680] usb 2-1: Product: syz [ 242.487035][ T5680] usb 2-1: Manufacturer: syz [ 242.493073][ T5677] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 242.515316][ T5680] usb 2-1: SerialNumber: syz [ 242.527433][ T5865] dvb-usb: bulk message failed: -22 (2/0) [ 242.541907][ T5677] usb 4-1: media controller created [ 242.595274][ T5680] usb 2-1: config 0 descriptor?? [ 242.632819][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.743914][ T5677] dvb-usb: bulk message failed: -22 (6/0) [ 242.772754][ T5677] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 242.839390][ T5677] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 242.968718][ T5677] dvb-usb: schedule remote query interval to 150 msecs. [ 242.993423][ T5677] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 243.114987][ T5677] usb 4-1: USB disconnect, device number 2 [ 243.382116][ T5680] appletouch 2-1:0.85: Geyser mode initialized. [ 243.393243][ T5677] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 243.440695][ T5680] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 243.641335][ T5680] usb 2-1: USB disconnect, device number 3 [ 243.646208][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 243.889966][ T5680] appletouch 2-1:0.85: input: appletouch disconnected [ 244.253540][ T5677] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.491232][ T5677] usb 4-1: Using ep0 maxpacket: 32 [ 244.529096][ T5677] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 244.557783][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.687401][ T5677] usb 4-1: config 0 descriptor?? [ 244.995722][ T5677] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 245.077019][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.204232][ T5677] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 245.233361][ T5882] ===================================================== [ 245.241166][ T5882] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 245.245770][ T5677] usb 4-1: media controller created [ 245.248617][ T5882] _copy_to_user+0xcc/0x120 [ 245.248742][ T5882] i2cdev_ioctl_smbus+0x586/0x660 [ 245.264163][ T5882] i2cdev_ioctl+0xa14/0xf40 [ 245.268873][ T5882] __se_sys_ioctl+0x23c/0x400 [ 245.273967][ T5882] __x64_sys_ioctl+0x97/0xe0 [ 245.278766][ T5882] x64_sys_call+0x1975/0x3ea0 [ 245.283806][ T5882] do_syscall_64+0x15d/0x3c0 [ 245.292194][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.299292][ T5882] [ 245.301905][ T5882] Uninit was stored to memory at: [ 245.307111][ T5882] __i2c_smbus_xfer+0x2618/0x30a0 [ 245.312371][ T5882] i2c_smbus_xfer+0x2d8/0x480 [ 245.317199][ T5882] i2cdev_ioctl_smbus+0x4a1/0x660 [ 245.322521][ T5882] i2cdev_ioctl+0xa14/0xf40 [ 245.327174][ T5882] __se_sys_ioctl+0x23c/0x400 [ 245.332085][ T5882] __x64_sys_ioctl+0x97/0xe0 [ 245.336805][ T5882] x64_sys_call+0x1975/0x3ea0 [ 245.341733][ T5882] do_syscall_64+0x15d/0x3c0 [ 245.346463][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.352579][ T5882] [ 245.354952][ T5882] Local variable msgbuf1.i created at: [ 245.360759][ T5882] __i2c_smbus_xfer+0x97c/0x30a0 [ 245.365798][ T5882] i2c_smbus_xfer+0x2d8/0x480 [ 245.370716][ T5882] [ 245.373086][ T5882] Byte 1 of 2 is uninitialized [ 245.377896][ T5882] Memory access of size 2 starts at ffff8880278ffcf6 [ 245.384740][ T5882] Data copied to user address 00002000000000c0 [ 245.394380][ T5882] [ 245.396801][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.407073][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.417482][ T5882] ===================================================== [ 245.424690][ T5882] Disabling lock debugging due to kernel taint [ 245.531077][ T5882] Kernel panic - not syncing: kmsan.panic set ... [ 245.537702][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.3.13 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 245.548630][ T5882] Tainted: [B]=BAD_PAGE [ 245.552899][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.563144][ T5882] Call Trace: [ 245.566545][ T5882] [ 245.569599][ T5882] __dump_stack+0x26/0x30 [ 245.574141][ T5882] dump_stack_lvl+0x50/0x1c0 [ 245.578952][ T5882] ? dump_stack+0x12/0x25 [ 245.583494][ T5882] dump_stack+0x1e/0x25 [ 245.587856][ T5882] vpanic+0x7b4/0x1430 [ 245.592223][ T5882] panic+0x15d/0x160 [ 245.596388][ T5882] kmsan_report+0x31a/0x320 [ 245.601148][ T5882] ? kmsan_internal_check_memory+0x1e8/0x240 [ 245.607350][ T5882] ? kmsan_copy_to_user+0xef/0x190 [ 245.612699][ T5882] ? _copy_to_user+0xcc/0x120 [ 245.617573][ T5882] ? i2cdev_ioctl_smbus+0x586/0x660 [ 245.623003][ T5882] ? i2cdev_ioctl+0xa14/0xf40 [ 245.627895][ T5882] ? __se_sys_ioctl+0x23c/0x400 [ 245.632985][ T5882] ? __x64_sys_ioctl+0x97/0xe0 [ 245.637977][ T5882] ? x64_sys_call+0x1975/0x3ea0 [ 245.643050][ T5882] ? do_syscall_64+0x15d/0x3c0 [ 245.648057][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.654347][ T5882] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 245.659934][ T5882] ? __i2c_transfer+0x1189/0x31c0 [ 245.665175][ T5882] ? kmsan_get_metadata+0xf1/0x160 [ 245.670566][ T5882] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 245.677148][ T5882] ? kmsan_get_metadata+0xf1/0x160 [ 245.682513][ T5882] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 245.688590][ T5882] ? __i2c_smbus_xfer+0x201d/0x30a0 [ 245.693977][ T5882] ? kmsan_get_metadata+0xf1/0x160 [ 245.699333][ T5882] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 245.705412][ T5882] kmsan_internal_check_memory+0x1e8/0x240 [ 245.711476][ T5882] kmsan_copy_to_user+0xef/0x190 [ 245.716664][ T5882] _copy_to_user+0xcc/0x120 [ 245.721363][ T5882] i2cdev_ioctl_smbus+0x586/0x660 [ 245.726650][ T5882] i2cdev_ioctl+0xa14/0xf40 [ 245.731386][ T5882] ? kmsan_get_shadow_origin_ptr+0x77/0xb0 [ 245.737458][ T5882] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 245.742702][ T5882] __se_sys_ioctl+0x23c/0x400 [ 245.747624][ T5882] __x64_sys_ioctl+0x97/0xe0 [ 245.752459][ T5882] x64_sys_call+0x1975/0x3ea0 [ 245.757374][ T5882] do_syscall_64+0x15d/0x3c0 [ 245.762224][ T5882] ? clear_bhb_loop+0x50/0xa0 [ 245.767117][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.773238][ T5882] RIP: 0033:0x7f0ad5f9ce59 [ 245.777822][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.797642][ T5882] RSP: 002b:00007f0ad6f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.806285][ T5882] RAX: ffffffffffffffda RBX: 00007f0ad6215fa0 RCX: 00007f0ad5f9ce59 [ 245.814435][ T5882] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000004 [ 245.822565][ T5882] RBP: 00007f0ad6032d6f R08: 0000000000000000 R09: 0000000000000000 [ 245.830722][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.838844][ T5882] R13: 00007f0ad6216038 R14: 00007f0ad6215fa0 R15: 00007ffe32584f88 [ 245.847034][ T5882] [ 245.850864][ T5882] Kernel Offset: disabled [ 245.855267][ T5882] Rebooting in 86400 seconds..