last executing test programs: 58.164460798s ago: executing program 1 (id=101): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) close_range(r0, 0xffffffffffffffff, 0x0) 57.496418777s ago: executing program 1 (id=103): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 57.15635281s ago: executing program 1 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 57.145443513s ago: executing program 1 (id=107): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(0x0, 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) 55.515371072s ago: executing program 1 (id=113): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) 54.870727927s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) fchdir(0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(0x0, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x11, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffdff}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0xa8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000000) 53.94435877s ago: executing program 32 (id=118): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) fchdir(0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(0x0, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x11, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffdff}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0xa8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000000) 12.471339297s ago: executing program 0 (id=263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000068c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10, 0x117, 0x3, 0x1}], 0x20}], 0x1, 0x0) 11.853521426s ago: executing program 0 (id=266): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000400)) 11.035650082s ago: executing program 0 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x3, 0x50000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000500)={0x5, 0x0, [{0xd, 0x6, 0x5, 0x2, 0xc, 0x10000, 0x6}, {0x0, 0x5, 0x1, 0xf, 0x2, 0x3, 0x10}, {0x40000000, 0xc, 0x4, 0xd148, 0xfffffff3, 0x8, 0x280000}, {0x40000000, 0xffffffff, 0x1, 0x7ff, 0x6, 0x3b, 0x7}, {0xd, 0x0, 0x5, 0xff, 0x4, 0xfffffff8, 0x3}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) 10.970368391s ago: executing program 4 (id=269): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = timerfd_create(0x0, 0x0) dup2(r1, r1) stat(0x0, &(0x7f0000000500)) stat(0x0, &(0x7f0000000380)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) clock_gettime(0x7, &(0x7f0000000740)) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)) 9.482775758s ago: executing program 4 (id=273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xf) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000280), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000680)=""/253, 0xfd}], 0x5, &(0x7f0000000780)}, 0x100) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001dc0), 0x80000, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000500)={0x0, 0x36, 0x4, @thr={&(0x7f0000000880)="46fcf35b5954ff6a1272ed5309bf357895efccbdecc6f3a17bfcbdd01c9a4684664ee88fa509ef94a5c3eb32917e3c2891a709f4acf105c709505b92152c5bcd04b918641f83803295dac78c445cd6767655ea1d491cd0fc71980dffe02dc0877ba7fdfd18cef9c969e069fdc6700d2a6b7c31f81dca7617e2678a6020bd0ee3d23d348d4514f082fa32e2ad2aef6910c52bb8c114d891cfd318bdd4c6b7fcafa035d06e0fbef05fb2374880754d1a4f048b213ea9a1b4d25b5257953260b2b197b9be5f4e0622bb87d770473e69a2d5d933796e649883516e8f8dbc1c5a9d67ee40e3b0c0f68a34b55ec3eec02a5cc2807d", &(0x7f0000001ac0)="849ac2cab3f666719ca4cba4113999fef11c8e0a348333919874b1d62d2f030f6b7685645d611c91d7e0ea50ba7977bbb738e988051e274fc8b37f48dc163610fe09f3af9bddc859663d9b713ccfa76bea68fe2deb40089ab5667b2e429f58787da48199029c95b203d83ede50cef6f4a3cefdec749832c39753c64a4fed486dda975b900237e112a71679df4ba19688c161ced31e4a83d38c131be364664688382014593fd76bdab1822d67cd37fd27f446f74efa5a8172b09cb6"}}, &(0x7f0000000580)=0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000001bc0)={{r7, r8+10000000}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) 9.110806212s ago: executing program 0 (id=279): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x118803) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x400, 0x40206, 0x11e}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 8.761735566s ago: executing program 5 (id=281): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 8.421548604s ago: executing program 3 (id=282): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x84}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @remote, 0x7}, 0x1c) 7.793971298s ago: executing program 3 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="445a7dcdd12c408becdab0db42d57e47", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0xc812) recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) 7.473593604s ago: executing program 2 (id=286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x497c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6}) 6.75726615s ago: executing program 4 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x40400c0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 6.756839147s ago: executing program 3 (id=288): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r1 = io_uring_setup(0x3a19, &(0x7f0000000240)={0x0, 0xcb6c, 0x5042, 0x3, 0x227, 0x0, r0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x66) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0xa, @pix={0x9, 0x1, 0x41414770, 0x0, 0x7ff, 0xffff, 0xa, 0x9, 0x1, 0x7, 0x0, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r4, &(0x7f0000001e00)=""/4096, 0x1000, 0x10000, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002801000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.131079s ago: executing program 2 (id=289): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x40810, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, '@'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$.$\xb0$[\xfa[{'}}, {@fowner_gt={'fowner>', 0xee01}}]}}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$can_raw(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500)="b9b9c86368a0c3e2ab51d5", &(0x7f00000000c0)=""/48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 6.130105374s ago: executing program 4 (id=290): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.11471523s ago: executing program 2 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010) 4.505467517s ago: executing program 5 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 4.50464341s ago: executing program 3 (id=293): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x400, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) io_uring_enter(r4, 0x847be, 0xdbff, 0x46, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000020c000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000440)="baf80c66b878fba38166efbafc0c66ed660f5eb600000f0108660f1ee10f019955679a0800cd0066b836189c080f23d00f21f866353000000a0f23f8ea0100a3006766c7442400a70000006766c74424020a0000006766c744240600000000670f011c24baf80c66b81c85e88966efbafc0c66b80000000066ef", 0x7a}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x836, 0x0, 0x3}]}) 3.772158813s ago: executing program 2 (id=294): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) 3.045395463s ago: executing program 4 (id=295): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x7e5104, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="420000000100000004000000000000b028b96d02d2f55c032381e40000000000200000001ec0109e384799f6c7330e35f3c757b8bb33b9581f7210bbd3"], 0x24, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x1000}, &(0x7f0000000480)=ANY=[], 0x0, &(0x7f0000000a40)=""/4096) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9, 0x1, 0x1, 0x9, 0x13ec, 0x1}, 0x20) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 3.035954701s ago: executing program 5 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r7, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) r8 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r9, 0x60000}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r11, 0x90009427, &(0x7f0000000180)) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, &(0x7f0000000080)={0x2, 0xf, 0x7ff, 0xfffe, 0x0, 0x8, 0x0}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) 2.915816008s ago: executing program 0 (id=297): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 2.747940644s ago: executing program 3 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0xb7527000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 2.650233013s ago: executing program 2 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x497c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6}) 1.601623235s ago: executing program 0 (id=300): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.532653094s ago: executing program 5 (id=301): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x40810, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, '@'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$.$\xb0$[\xfa[{'}}, {@fowner_gt={'fowner>', 0xee01}}]}}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$can_raw(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500)="b9b9c86368a0c3e2ab51d5", &(0x7f00000000c0)=""/48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 1.023078656s ago: executing program 4 (id=302): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000003a0000410800030055b2b90a057ea5a5e17e42ee8bbff53935ab8161d3e890d18b876ee92b0918c9e3b8b9d0fba7ae8f0f2c5e5dcdcd61e648d7c60e2ebc27c32cae26cbf4f5"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x70bd26, 0x11000000, {{}, {@void, @val={0xc, 0x99, {0x6532, 0xe}}}}, [@NL80211_ATTR_FRAME_MATCH={0x18, 0x5b, "0747d2081e299fcb36a8b596f151028ee0abd599"}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x800000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 956.222272ms ago: executing program 2 (id=303): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 349.585483ms ago: executing program 3 (id=304): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x0, 0x7, 0x4, {0x2, @raw_data="93f6a5f2d18177c3e62dc3591412ac8d0b62159ae089adf892c08b17db368b92d72605031293b7b28bbcb776dadf7f66bb5eebe8cf26eec8b5379e0759990e582bc49dacbd977b9592edd3223d69a2e72a14047bd3001ad16e1c7b2484f10955c5a9bf0c342383399065321bc09856277f2b8ece58c3f17e934f04326fe0658f583d334a07ced0046f8ba7ad4bdcada26f421c16433eddfc8f30c1907b269112dccfb031df1a0236c1c386c8d53340565cb474cdbf5ec5755ea388be5298aaa5b8c99c613440ee8f"}}) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 214.446864ms ago: executing program 5 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=@newtaction={0x98, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0xd, 0x2, {{0x0, 0x0, 0x2, 0x0, 0x4e5}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x0, 0x1, [@m_mirred={0xffffffffffffff94, 0x13, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x2, 0x8, 0x10000000, 0x9, 0x90}}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x7fffffff, 0x6, 0x10000000, 0x0, 0x1a}, 0x1}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x2, 0x400, 0x1, 0x2, 0xc}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x3ff, 0x13db9290, 0x3, 0x3, 0x40}, 0x4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x45e, 0xd, 0x7, 0x7a, 0xff}, 0x1}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x10, 0x6, 0x2, 0xfff}, 0x1}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x5, 0x2, 0x8, 0x6}, 0x2}}]}, {0x0, 0x6, "1384da10ea79d6e945be4e313ff7295675654f6dcb65702637f13177ac9956f5e1db5dd732f33d39d485a6e1c336c8e2321cd41a4d275709947fec3b2d3f1a821c4dda6f9dfcdbac209b1bfe9a62532326a20e2f13e03d7da319a5f3fd7004e088cd3cfc775c479ed6e742781c876063e803b43b7bf503a1d1d0ba1dc33a3f7d0fc7a0881b2415805c66d5cba459df36736113471c18681825a898a7f14c43314a14044a31a2e6283c917fa9dc17d688fb1175dab9d1a42ecaf77f8f9557fdbfde3e1c567a7fe41b059d233a98033eed9083b979d17b3c99cca72b4a679386437d924f1d7e0b0eb7b4545bdeb01f1feacc43a87d91e19c"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_csum={0x0, 0x9, 0x0, 0x0, {{}, {}, {0x0, 0x6, "28405edcd4997148ff4506d1f8efa4e8ee86511e2320856b7397c3b74c08b9a06b467304df2dd65e24f978666f05c8ed554c1fc27cb66be7128bd36b37c420e93dde0e22ac5dabf34620cdef9dabd51e89b124992826e9b125af13364dac35f5576e05df1fec64b9dff9f819c1c570c39ddb8c810c1c199215d8257e7df6d83a6725ff5fc8bb3843e879a6968e5a407f745bde5cee30f16df4714a69c223"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_ife={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_PARMS={0x0, 0x1, {{0x3, 0x2, 0x4, 0x5, 0xffffe193}, 0x1}}, @TCA_IFE_PARMS={0x0, 0x1, {{0xfffffffc, 0x8, 0x8cbc710bc60a571b, 0x2, 0x3e722870}}}, @TCA_IFE_TYPE={0x0, 0x5, 0x2}, @TCA_IFE_PARMS={0x0, 0x1, {{0x6, 0x7, 0x7, 0xffffffff, 0xf3d}, 0x1}}, @TCA_IFE_DMAC, @TCA_IFE_TYPE, @TCA_IFE_PARMS={0x0, 0x1, {{0x101, 0x5, 0x2, 0x10, 0x1}, 0x1}}, @TCA_IFE_SMAC={0x0, 0x4, @multicast}]}, {0x0, 0x6, "bf27c128b863fb200f7d2e649604405088744060d5ed34654182f791e23ebfd734a5a86f674e0a94f3cc3bddbbac88085ff5e1"}, {}, {0x0, 0x8, {0x0, 0x2}}}}, @m_connmark={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x8, 0xfff, 0x7, 0x2, 0x6}}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xe67d, 0x4, 0x10000000, 0x2, 0x10}, 0x7}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xffffffc0, 0x1, 0x20000000, 0x8, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x0, 0x0, 0x6, 0x7, 0x6}, 0x1bf}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x3, 0x7, 0x6, 0x3, 0x8}, 0xa7}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x80b, 0x0, 0x3, 0x6, 0xcc}, 0x6}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x3ff, 0x8, 0x3, 0x4, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x6, 0x2, 0x0, 0xffff8000}, 0x6}}]}, {0x0, 0x6, "984b8af90378477383"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x0, 0x7, 0xe6}, @TCA_TUNNEL_KEY_NO_CSUM={0x0, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x0, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x0, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x0, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @empty}]}, {0x0, 0x6, "5fddf68d29bfc1293833d9d78a4d5817d5202b85b05fd9"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_sample={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x8}]}, {0x0, 0x6, "171b08a665a76755cd2b27e6972661b9cfe9621f17d22ceabbe4ae8df40eb9ac29a2cc7b164b06e635f5bf666b7b4b943f6e1e3d17a47268f5995d7b524fea70de76340abadcaf41bbf1480e0c3b40bf205bba7ad55e10b06d5ec52f885e58fc847fa40a831c2c19fc8cb0d3af09326a0d1ea5f61f435f6064bfeba2a4c63d5abc959b"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_nat={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0xfffffffe, 0x7, 0x4a0909a9, 0x7}, @rand_addr=0x64010101, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x80000000, 0x7, 0x5, 0x7ffa728e, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x6}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x1, 0x0, 0x3}, @broadcast, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0x2, 0x1, 0x8, 0xe}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0x6, 0x4, 0x8, 0x8}, @multicast2, @remote, 0xff000000}}]}, {0x0, 0x6, "21a47129166f821eb6c1271840db3751fc7bf18cf813722c01d1674ff969a9c6ce3f20f065b6c1d63752a2189014bbec9d467e8841ce72dd65187fa76bf957d20f76ec5d8a4acb46704a42b51c9759dc1489257bd005ca621a40b05325f6260b5f930b86e9d5d0ec6401da72d091f1b98885c8d20b51753b7e74c2605fd07e2e7e4b894296582881e5996d813adcf8af41bc9d0f7cd26525c0b310afb737071656a2cd5d56f044c2efe0ff7a7465811a1f6bbab08dbdf3c00c59303995b0e73f1b99053025473e69b04f556563fd4e25938158e33ac36680161e7a5fb4d6797cf08d5e5e35ce4196edaa2279a348fd6666b0cdbb2d27ff48f48df148851232"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1}}}}, @m_police={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0x0, 0x8, 0xd42}], [@TCA_POLICE_RATE64={0x0, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x9, 0x9, 0xfe000000, 0x2, 0x3, 0x4, 0x7, 0x4, 0x3ff, 0x8c6, 0x7221, 0x4, 0x88f8, 0x3, 0xfffffff9, 0x3, 0x5, 0x2, 0xb614, 0xfff, 0xfffffff8, 0x6, 0x5b, 0x65e2, 0x10, 0xfffffff7, 0x8, 0x266, 0x8, 0x3ff, 0x7, 0x7, 0x95c, 0x0, 0x2, 0x0, 0x5, 0xfffff6cb, 0x7, 0x9, 0x3, 0x5, 0x5, 0x5, 0xb3, 0x7f, 0x1, 0xfce, 0xbd8, 0x9, 0x4, 0x4, 0x45, 0x2, 0x9, 0x9, 0xfffffff9, 0x81, 0xa7, 0x2, 0x2, 0xfffff001, 0x1, 0x0, 0x9, 0x0, 0x374, 0x7ac, 0x7, 0x4, 0x7, 0x7, 0x401, 0x3, 0x3, 0x9, 0x8b36, 0xaef, 0x5, 0x2, 0xfffffff8, 0x0, 0x7, 0x1, 0x101, 0x3, 0x7ff, 0xcf, 0x101, 0x0, 0xd, 0x8, 0x0, 0x9, 0x6b34, 0x10001, 0xd3, 0x0, 0x6, 0xbd, 0x1, 0x401, 0xff, 0x2, 0x9, 0x8, 0xcef5, 0x40, 0x9, 0x8000, 0x4, 0x2, 0x5, 0x2, 0x7f, 0x9, 0x6, 0x5, 0xb, 0x3, 0x5, 0x6, 0x1, 0x1, 0x9, 0xed, 0x4, 0x9, 0x2, 0xfffffff7, 0x8, 0x4, 0x0, 0x31000000, 0x0, 0x10001, 0x7, 0x5, 0x7abc2ce, 0x250, 0x6, 0x9, 0x1, 0x3, 0x757, 0x8, 0x3ff, 0x5, 0xf, 0x9, 0x8, 0x7, 0x7, 0x4, 0x10, 0x8, 0x3, 0x8, 0x7, 0x1, 0x6, 0x400, 0x3, 0x7, 0xf, 0x7f, 0x4, 0x10001, 0xff, 0xa, 0x2, 0x54154ca, 0x3, 0xffff6867, 0x2, 0x0, 0x2672, 0x100, 0xff, 0x6, 0x1, 0x0, 0xec96, 0x350, 0x0, 0x9d61, 0xfffffffd, 0xc88, 0x3, 0x1, 0x4, 0x3, 0x8, 0x10001, 0x7, 0x10001, 0x0, 0x5, 0x400, 0x9, 0x4, 0x8a, 0xffff, 0x4, 0xf96, 0x9, 0xf8d, 0xa39, 0xc72, 0x5d4054e4, 0xfffffff7, 0x4, 0x66, 0x2, 0x7f, 0x9, 0x4, 0x1, 0x9, 0xc, 0xfffffffd, 0x80, 0x8e4, 0x7, 0xa, 0x1000004, 0x80, 0xc0, 0x3, 0x6, 0x8, 0xf, 0x8, 0x8, 0x2, 0x9, 0xf, 0x6, 0x9, 0x8, 0x81, 0x8000, 0x0, 0x2, 0x4, 0x3, 0x3, 0x38d3, 0x6709499c, 0x7, 0x0, 0x0, 0x2, 0x7, 0x4, 0x9]}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x630, 0x3, 0x53c, 0x80, 0x6, 0x0, 0x5, 0xd, 0x40, 0x9, 0x3, 0xfff, 0x3, 0x8, 0x1, 0x123, 0x3, 0x40, 0x2, 0x0, 0x8, 0x7ff, 0x81, 0x1d0f, 0x6, 0x8000, 0x4, 0x8001, 0x1, 0xc, 0x1000, 0x9, 0x7, 0x0, 0x4, 0xc, 0x4, 0x4, 0x5a, 0x6, 0xfffffffc, 0xe0000, 0xa1, 0xfffffff7, 0x300, 0xffff8e94, 0x5, 0x7fff, 0x0, 0xffff, 0xd5000000, 0x1, 0xffffe8bb, 0x7, 0x8, 0x6, 0xc, 0x20000, 0x2, 0x81, 0x5, 0x5, 0x5, 0x8, 0x0, 0x10001, 0x2, 0x81, 0x3, 0xffffc8a9, 0xd, 0x200000, 0x1, 0xaff, 0x7, 0x8, 0x4, 0x4, 0x6, 0x5, 0x7, 0x6, 0x3ecc, 0x6640, 0x8, 0xfff, 0x5, 0xae5, 0x1, 0x75b1, 0xb, 0x2, 0x48102dd9, 0x1, 0x8, 0x3, 0x3, 0x79, 0x80000001, 0x5, 0x0, 0xed, 0x1c0000, 0x3, 0x5, 0x5, 0x6, 0x10000, 0x6, 0x1000, 0x8, 0x7, 0x0, 0x8000, 0x80000001, 0xffff, 0xe4, 0x4e, 0x81, 0x0, 0x6, 0xf, 0x1, 0x6, 0xfffffff9, 0x81, 0x1, 0x4, 0x2, 0xd46, 0x9, 0xffff, 0x3a6388cc, 0x0, 0x12000000, 0x401, 0x1, 0x1, 0x401, 0x2, 0x7, 0xff, 0x401, 0x0, 0x7, 0xb4d, 0x6, 0x0, 0x8, 0x2, 0x7, 0x5, 0x200, 0x8cf2, 0x9, 0x4, 0x3, 0x1, 0x1ff, 0x6, 0x7f, 0x9, 0x6, 0xfffffff8, 0x7, 0x3, 0x6, 0x4, 0xff, 0xfffffff9, 0x9, 0xa, 0x80000000, 0x4, 0x2, 0x5518, 0x9, 0x3, 0xfffffff8, 0x1, 0x8, 0x6e, 0x4, 0xfff, 0x10000, 0x9, 0x4, 0x1, 0x5, 0xff, 0x7, 0x6, 0x95, 0x7ff, 0xc, 0x4, 0xfe, 0x3, 0xfffff800, 0x7, 0x3, 0x7, 0x7, 0x132c, 0x7fff, 0xae2d, 0x5, 0x2, 0x0, 0x69, 0x38, 0x3ff, 0xac, 0x4, 0x30, 0x1, 0x10000, 0x2, 0x4, 0x3f, 0x6, 0xc1e, 0x7f, 0x6, 0x2, 0x2, 0x1, 0x5, 0x0, 0x4f89a589, 0x400, 0x7, 0xb25, 0x5f, 0x200, 0x4, 0x40008, 0x0, 0x8d9b, 0x5, 0x8001, 0x6, 0x4, 0x9, 0x8000, 0xc2, 0x36d, 0x4, 0x0, 0x4, 0x1ff, 0xe, 0x8, 0x7, 0x1000, 0x8]}, @TCA_POLICE_RATE={0x0, 0x2, [0x4, 0x80000000, 0x19, 0x3, 0x9f, 0x6, 0x5, 0x1, 0xb944, 0x9, 0x80000000, 0x4, 0xffff032f, 0x551, 0x100000, 0x3, 0x5, 0x5e, 0xe, 0x2, 0x10001, 0x6, 0xffffffff, 0x6, 0x4, 0x9, 0xf, 0x4, 0x71, 0x5, 0xffffffff, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0xbd, 0x2, 0x6, 0x7, 0x2, 0xffffffff, 0xa, 0x2, 0x6, 0x5, 0xdd4e, 0x2, 0x9, 0x7fff, 0x5, 0x64cc, 0x7, 0x1, 0x1, 0xf, 0xfffffffa, 0x4, 0x9, 0xff, 0x80000000, 0xfff, 0x3ff, 0x9, 0xb653, 0x7c, 0x7, 0x2, 0x5, 0x67d6, 0x5, 0x2, 0x3, 0xa, 0x1, 0x401, 0x7, 0x9, 0x9, 0xdb, 0xf, 0x0, 0x8, 0x56db, 0x1000, 0x1, 0xa, 0xd230, 0xca7d, 0x400, 0x1000, 0xfffff000, 0x7, 0x80, 0xfffffffe, 0xe, 0x3, 0x4, 0x6, 0xfff, 0x2, 0x1d, 0x8, 0x8, 0x7, 0x10, 0x2, 0x3, 0x5, 0xb4, 0xffffff26, 0x7, 0x8, 0x0, 0xa, 0x5ee, 0x5, 0x1, 0xbc66, 0x9, 0x81, 0x8, 0xe, 0x1, 0x80000000, 0x8, 0x8, 0x6a55, 0x9, 0x8001, 0x8, 0x662, 0x2, 0x5e1d, 0x9d, 0x4, 0xffffaec6, 0x9, 0x9ac, 0xffffff00, 0x40, 0x5, 0x42, 0x3, 0x1, 0x1, 0xfffffff7, 0x6, 0x0, 0xc0000000, 0x2, 0x7, 0x40, 0x0, 0xdc, 0x45, 0xace, 0x6, 0x1, 0xd, 0x9, 0xc, 0x6d62, 0xfffffff9, 0x7, 0x5, 0x5, 0x3ff, 0xffff0001, 0x9, 0x8, 0x9, 0x1, 0xffff, 0x90, 0x25d9, 0x2, 0x6, 0xfffffffe, 0x5, 0x80000001, 0x3, 0x10, 0x9, 0xfff, 0x1c0, 0x8001, 0x0, 0x1, 0x1, 0x5, 0x9, 0xe, 0x0, 0x6, 0xfffffffd, 0x82f, 0x64, 0x5, 0x4, 0x40, 0x401, 0x40, 0x2, 0x7, 0x0, 0x4, 0x4934000, 0x10001, 0x6, 0x6, 0x798d, 0x6, 0x6, 0x2, 0x40, 0x9, 0x2, 0x7, 0x9, 0x2, 0x38c3, 0xa883, 0x9, 0x9, 0x0, 0x7, 0xd, 0x422a2d32, 0x807, 0x10000, 0xffff, 0x4, 0xf, 0x1bf4, 0x9, 0x40000000, 0xeb, 0x2, 0x2, 0x5, 0x7c37, 0x9, 0xfffffff8, 0x7, 0x87, 0x9, 0x40000000, 0x400, 0x97, 0x6, 0x9, 0x2d1, 0xfffffffc, 0x2]}], [@TCA_POLICE_TBF={0x0, 0x1, {0x9, 0xffffffffffffffff, 0x4, 0x4, 0x9, {0x0, 0x0, 0x7ff, 0xfff, 0x7, 0x1}, {0x5, 0x2, 0x4, 0x3, 0x63, 0x1}, 0x101, 0x13a, 0x3}}, @TCA_POLICE_RATE={0x0, 0x2, [0x1000, 0xce9a, 0x80, 0x10000, 0x2, 0x6, 0xd, 0x401, 0x1, 0x7, 0xe, 0x825, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x8000, 0x80000001, 0x800, 0x6, 0xfffffff8, 0x5, 0x7, 0x8001, 0x2, 0x1c3, 0x4ca3, 0x0, 0x8, 0x7, 0x465, 0x2e, 0x96c, 0xffffd9a9, 0x0, 0xfff, 0x5, 0x2b, 0x542, 0x7fffffff, 0x2, 0x8, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0xef0c, 0x9, 0x40, 0x1000, 0x0, 0x0, 0x9, 0x6, 0x5c05, 0xcfa1cba, 0x664, 0x3ff, 0x10000, 0x78, 0x8000, 0x7fffffff, 0x2, 0xe00000, 0x1b2, 0x3ff, 0x1ff, 0xc13, 0xfffff001, 0x8, 0x1, 0xfffffffb, 0x7, 0x1, 0xb23, 0x6, 0x7, 0x3, 0x1000, 0x4, 0x8, 0x7, 0x5, 0x401, 0x5, 0xe3, 0x0, 0x5, 0x4, 0xfffffffd, 0x101, 0x8, 0x7fffffff, 0x9, 0x0, 0xb, 0x707bcdb0, 0x2, 0x5, 0x3, 0xfffffffa, 0x6, 0x24baa331, 0x101, 0x660e, 0x0, 0x0, 0x3, 0x5235, 0xfff, 0x1, 0x3, 0x1, 0x0, 0x3, 0x7, 0x4, 0x3, 0x2a, 0x6d, 0xffff, 0x6, 0xeb27, 0x6, 0x10000, 0xc00000, 0x0, 0x24dc, 0x7ff, 0x629935d7, 0x40, 0x7, 0x3, 0x4, 0xb, 0xddd5, 0x3, 0xcf, 0x8c7, 0x9, 0x87c6, 0x400, 0x9, 0x5, 0x22, 0x9, 0x9, 0xc573, 0xb, 0x9, 0x29, 0x7fffffff, 0xfffffc7d, 0x4, 0x0, 0x7, 0x8001, 0xd1, 0x0, 0x5, 0x1, 0x80000000, 0x8, 0x450a, 0x9, 0x400, 0x401, 0x7fff, 0x10, 0x8, 0x7e3205c9, 0x3, 0x8001, 0x6, 0x9, 0x80000000, 0x8, 0x9, 0x9, 0xd, 0x400, 0x2, 0x1, 0x5, 0x5, 0x7, 0x7c, 0x5, 0xa5, 0x7, 0x8, 0x2, 0x1000, 0x9, 0x6b0, 0x30000000, 0x9, 0x935, 0x101, 0x5, 0x0, 0x6, 0x80000001, 0xe, 0x2, 0x7, 0xa6d, 0x7, 0x2, 0x1, 0x3, 0xefb, 0x2, 0x52953043, 0x1, 0x1, 0xe52, 0x5, 0x1, 0x8, 0x5, 0x35, 0x1000, 0x2, 0x8f75, 0x8, 0x2000, 0x9, 0x623f, 0x3, 0x4, 0x7, 0x8000, 0x9c, 0x1, 0x0, 0xfffff94f, 0x5, 0x4, 0x9, 0x81, 0x5, 0x7, 0x3, 0x3, 0x6, 0xfffffffc, 0x7fff, 0x8, 0x0, 0x100, 0x3, 0x8, 0x5]}]]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}, @m_nat={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x8, 0xfffffffb, 0x3, 0x8, 0x10}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x4, 0x8, 0x2, 0x5, 0xd99}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x2, 0x10000000, 0x2, 0x200}, @private=0xa010101, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0x1, 0x7, 0x400, 0x80}, @broadcast, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1000000, 0x9477, 0x20000000, 0x6}, @remote, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x6, 0x1, 0x4, 0x4332, 0x8}, @remote, @multicast1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x4, 0xd8, 0xffffffffffffffff, 0x1, 0x7}, @private=0xa010102, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xfffeffff, 0x2, 0x20000002, 0x8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xfff, 0x0, 0x2, 0x80, 0xee}, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0x1}}]}, {0x0, 0x6, "a36ba27b283a8263baa057ca44fb000fc1662906407cca025bba5704ed7dfc28b1b5cf4e9c174bead56606cba3fe3d5e2bdea5979b3c40d073748e744f6bd7dab7f2dbf5882be466f14ba8aa47ec600d36535cffb4575711754451a375a93ce39b782c7d0648c1801413a57da9106c47b5ffc8250fc99d3b03af08038cd4b01ed4322ed7d508d977153ca0475a08d585ee35533773c117f057a49db092d20baf240c983d4dfb9936621da34b90e12185c8b83a143b5d"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1}}}}]}]}, 0x98}}, 0x0) 0s ago: executing program 5 (id=306): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. [ 68.153051][ T5805] cgroup: Unknown subsys name 'net' [ 68.306819][ T5805] cgroup: Unknown subsys name 'cpuset' [ 68.315391][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.679691][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.307753][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314220][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.402731][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.419688][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.432534][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.440661][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.448049][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.456786][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.464471][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.467552][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.472169][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.479927][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.493129][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.493947][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.501630][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.508648][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.516453][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.530247][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.530784][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.538224][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.545254][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.552561][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.561128][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.566509][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.575167][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.579342][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.587563][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.241674][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 74.310781][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 74.371660][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 74.454508][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 74.569796][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.577057][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.584822][ T5826] bridge_slave_0: entered allmulticast mode [ 74.591862][ T5826] bridge_slave_0: entered promiscuous mode [ 74.604621][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 74.646902][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.654403][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.661516][ T5826] bridge_slave_1: entered allmulticast mode [ 74.668697][ T5826] bridge_slave_1: entered promiscuous mode [ 74.693289][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.700692][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.707917][ T5816] bridge_slave_0: entered allmulticast mode [ 74.715134][ T5816] bridge_slave_0: entered promiscuous mode [ 74.759258][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.766412][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.773504][ T5816] bridge_slave_1: entered allmulticast mode [ 74.780689][ T5816] bridge_slave_1: entered promiscuous mode [ 74.813872][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.821034][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.828239][ T5830] bridge_slave_0: entered allmulticast mode [ 74.835596][ T5830] bridge_slave_0: entered promiscuous mode [ 74.865383][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.879195][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.886461][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.893563][ T5830] bridge_slave_1: entered allmulticast mode [ 74.900596][ T5830] bridge_slave_1: entered promiscuous mode [ 74.932930][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.977288][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.989602][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.999075][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.006777][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.014433][ T5815] bridge_slave_0: entered allmulticast mode [ 75.021329][ T5815] bridge_slave_0: entered promiscuous mode [ 75.041092][ T5826] team0: Port device team_slave_0 added [ 75.085976][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.093158][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.100673][ T5815] bridge_slave_1: entered allmulticast mode [ 75.108319][ T5815] bridge_slave_1: entered promiscuous mode [ 75.117310][ T5826] team0: Port device team_slave_1 added [ 75.151391][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.173644][ T5816] team0: Port device team_slave_0 added [ 75.217747][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.225180][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.232268][ T5825] bridge_slave_0: entered allmulticast mode [ 75.239577][ T5825] bridge_slave_0: entered promiscuous mode [ 75.249287][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.260140][ T5816] team0: Port device team_slave_1 added [ 75.266928][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.274466][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.300733][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.315339][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.324823][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.331967][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.339349][ T5825] bridge_slave_1: entered allmulticast mode [ 75.346484][ T5825] bridge_slave_1: entered promiscuous mode [ 75.374142][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.381088][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.407526][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.421548][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.502947][ T5830] team0: Port device team_slave_0 added [ 75.509460][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.516721][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.542646][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.556005][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.562947][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.589053][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.614489][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.624547][ T5821] Bluetooth: hci0: command tx timeout [ 75.624553][ T5835] Bluetooth: hci2: command tx timeout [ 75.624770][ T5835] Bluetooth: hci1: command tx timeout [ 75.633196][ T5830] team0: Port device team_slave_1 added [ 75.666601][ T5815] team0: Port device team_slave_0 added [ 75.674845][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.704287][ T5835] Bluetooth: hci3: command tx timeout [ 75.704304][ T5827] Bluetooth: hci4: command tx timeout [ 75.719386][ T5815] team0: Port device team_slave_1 added [ 75.749528][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.756533][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.782592][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.802805][ T5826] hsr_slave_0: entered promiscuous mode [ 75.810541][ T5826] hsr_slave_1: entered promiscuous mode [ 75.860718][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.867736][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.894307][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.932062][ T5825] team0: Port device team_slave_0 added [ 75.956617][ T5816] hsr_slave_0: entered promiscuous mode [ 75.962856][ T5816] hsr_slave_1: entered promiscuous mode [ 75.969507][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 75.975362][ T5816] Cannot create hsr debugfs directory [ 75.993325][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.000406][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.026752][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.040104][ T5825] team0: Port device team_slave_1 added [ 76.067759][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.074817][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.100885][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.179442][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.187005][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.212990][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.229130][ T5830] hsr_slave_0: entered promiscuous mode [ 76.235482][ T5830] hsr_slave_1: entered promiscuous mode [ 76.241514][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 76.247296][ T5830] Cannot create hsr debugfs directory [ 76.274206][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.281140][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.307248][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.432939][ T5815] hsr_slave_0: entered promiscuous mode [ 76.439664][ T5815] hsr_slave_1: entered promiscuous mode [ 76.446327][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 76.452056][ T5815] Cannot create hsr debugfs directory [ 76.486105][ T5825] hsr_slave_0: entered promiscuous mode [ 76.492705][ T5825] hsr_slave_1: entered promiscuous mode [ 76.499186][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 76.505108][ T5825] Cannot create hsr debugfs directory [ 76.938688][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.956734][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.967017][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.986451][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.046731][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.061832][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.073308][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.091751][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.170167][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.180190][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.190567][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.201312][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.300982][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.315237][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.334780][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.348118][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.390386][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.454802][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.501216][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.508520][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.527109][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.537608][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.569996][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.577173][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.589475][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.599305][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.618654][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.667710][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.704091][ T5827] Bluetooth: hci1: command tx timeout [ 77.706467][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.709502][ T5827] Bluetooth: hci0: command tx timeout [ 77.716614][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.729934][ T5835] Bluetooth: hci2: command tx timeout [ 77.752451][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.773707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.780860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.789548][ T5827] Bluetooth: hci3: command tx timeout [ 77.795923][ T5835] Bluetooth: hci4: command tx timeout [ 77.826639][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.899321][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.922775][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.943226][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.950416][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.972483][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.979659][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.029110][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.036330][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.111012][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.118223][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.175960][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.230945][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.287808][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.317406][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.324607][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.364402][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.371583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.411136][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.568152][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.612945][ T5826] veth0_vlan: entered promiscuous mode [ 78.679850][ T5826] veth1_vlan: entered promiscuous mode [ 78.865805][ T5826] veth0_macvtap: entered promiscuous mode [ 78.900892][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.921413][ T5826] veth1_macvtap: entered promiscuous mode [ 78.937201][ T5830] veth0_vlan: entered promiscuous mode [ 78.978521][ T5830] veth1_vlan: entered promiscuous mode [ 79.021988][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.036859][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.072809][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.082081][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.099921][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.109497][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.138708][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.195989][ T5830] veth0_macvtap: entered promiscuous mode [ 79.206417][ T5815] veth0_vlan: entered promiscuous mode [ 79.251745][ T5830] veth1_macvtap: entered promiscuous mode [ 79.277815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.280194][ T5816] veth0_vlan: entered promiscuous mode [ 79.292013][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.320586][ T5815] veth1_vlan: entered promiscuous mode [ 79.362439][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.372214][ T5816] veth1_vlan: entered promiscuous mode [ 79.390998][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.399338][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.410896][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.432455][ T5825] veth0_vlan: entered promiscuous mode [ 79.452761][ T4104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.463377][ T5911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.486255][ T5825] veth1_vlan: entered promiscuous mode [ 79.502533][ T5911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.511973][ T5911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.533413][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.578844][ T5815] veth0_macvtap: entered promiscuous mode [ 79.592413][ T5815] veth1_macvtap: entered promiscuous mode [ 79.666678][ T5816] veth0_macvtap: entered promiscuous mode [ 79.689913][ T5825] veth0_macvtap: entered promiscuous mode [ 79.690386][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.722578][ T5816] veth1_macvtap: entered promiscuous mode [ 79.738576][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.768971][ T5825] veth1_macvtap: entered promiscuous mode [ 79.776817][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.789198][ T5835] Bluetooth: hci0: command tx timeout [ 79.790377][ T5827] Bluetooth: hci2: command tx timeout [ 79.795837][ T5821] Bluetooth: hci1: command tx timeout [ 79.805059][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.813574][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.865625][ T5821] Bluetooth: hci3: command tx timeout [ 79.871050][ T5821] Bluetooth: hci4: command tx timeout [ 79.902573][ T4104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.923619][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.941778][ T4104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.956900][ T4104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.977773][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.997851][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.014010][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.022573][ T4104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.033556][ T4104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.056000][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.086157][ T4104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.101887][ T4104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.137974][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.165360][ T4104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.315398][ T5948] syzkaller0: entered promiscuous mode [ 80.320884][ T5948] syzkaller0: entered allmulticast mode [ 80.327999][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.336946][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.347203][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.840280][ T5956] delete_channel: no stack [ 81.508301][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578381][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.609460][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.678000][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.693805][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.810818][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.834239][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.865884][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.884610][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.894072][ T5821] Bluetooth: hci1: command tx timeout [ 81.899480][ T5821] Bluetooth: hci2: command tx timeout [ 81.905439][ T5821] Bluetooth: hci0: command tx timeout [ 81.946670][ T5821] Bluetooth: hci4: command tx timeout [ 81.952101][ T5821] Bluetooth: hci3: command tx timeout [ 82.002315][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.025518][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.736888][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.767261][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.948484][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 82.985129][ T5969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.037143][ T5969] block device autoloading is deprecated and will be removed. [ 83.273947][ T5924] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.544602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.773804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.782921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.874242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.883403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.978756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.987861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.233782][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 84.256101][ T5924] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 84.265563][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.717511][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 84.755682][ T5924] pvrusb2: ********** [ 84.762990][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 84.784504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.872307][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.901563][ T5924] pvrusb2: Important functionality might not be entirely working. [ 84.937886][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 85.075625][ T5994] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.076050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.094071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.702047][ T5924] pvrusb2: ********** [ 85.818855][ T6003] netlink: 'syz.1.17': attribute type 3 has an invalid length. [ 87.197790][ T43] cfg80211: failed to load regulatory.db [ 87.268574][ T5924] usb 3-1: USB disconnect, device number 2 [ 87.274010][ T2340] pvrusb2: Invalid write control endpoint [ 87.606883][ T6009] Bluetooth: MGMT ver 1.23 [ 87.942886][ T2340] pvrusb2: Invalid write control endpoint [ 87.954965][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.980982][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.989506][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 88.009953][ T2340] pvrusb2: Device being rendered inoperable [ 88.065781][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 88.273884][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 88.286944][ T2340] pvrusb2: Attached sub-driver cx25840 [ 88.292498][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 88.303061][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 88.638479][ T6024] Bluetooth: MGMT ver 1.23 [ 88.807794][ T6025] sp0: Synchronizing with TNC [ 90.983780][ T5821] Bluetooth: hci2: command 0x0401 tx timeout [ 90.989898][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 94.533995][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.712170][ T6082] fuse: Bad value for 'fd' [ 94.767748][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.780704][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 94.790275][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.153457][ T43] usb 5-1: config 0 descriptor?? [ 95.172649][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 95.593227][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 96.003799][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 96.025492][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 96.098358][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 96.153780][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 96.249591][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 96.375487][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 96.393825][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 96.481050][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 96.497268][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 96.543772][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.550912][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 96.598491][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 96.621145][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 96.723775][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.747626][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.772525][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.821867][ T9] usb 3-1: Product: syz [ 96.853724][ T9] usb 3-1: Manufacturer: syz [ 96.872166][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 96.878663][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 96.908743][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 96.916077][ T5906] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 96.923708][ T9] usb 3-1: SerialNumber: syz [ 96.936278][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.944513][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 96.955043][ T9] usb 3-1: config 0 descriptor?? [ 96.975230][ T5906] usb 2-1: Product: syz [ 96.985538][ T43] pwc: Registered as video103. [ 96.998986][ T5906] usb 2-1: Manufacturer: syz [ 97.017937][ T5906] usb 2-1: SerialNumber: syz [ 97.022935][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 97.053931][ T5906] usb 2-1: config 0 descriptor?? [ 97.070817][ T5906] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 97.110133][ T43] usb 5-1: USB disconnect, device number 2 [ 97.213835][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.436847][ T5906] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 97.694829][ T6122] Zero length message leads to an empty skb [ 98.720228][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 98.802002][ T30] audit: type=1800 audit(1762546469.440:2): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.52" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 98.981431][ T9] usb 3-1: USB disconnect, device number 3 [ 99.529211][ T5818] usb 2-1: USB disconnect, device number 2 [ 100.110992][ T6149] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 101.424702][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 101.569554][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.577654][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.853797][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.053899][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 102.072539][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 102.223847][ T5978] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.262524][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.393945][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.644423][ T9] usb 4-1: Product: syz [ 102.648621][ T9] usb 4-1: Manufacturer: syz [ 102.667093][ T5978] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 102.678965][ T9] usb 4-1: SerialNumber: syz [ 102.684824][ T5978] usb 3-1: config 0 has no interface number 0 [ 102.764334][ T6175] process 'syz.1.63' launched './file0' with NULL argv: empty string added [ 103.144937][ T9] usb 4-1: config 0 descriptor?? [ 103.153982][ T6162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.232815][ T5978] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 103.417905][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 103.444853][ T5906] usb 4-1: USB disconnect, device number 2 [ 103.448089][ T5978] usb 3-1: Product: syz [ 104.034728][ T5978] usb 3-1: Manufacturer: syz [ 104.041874][ T5978] usb 3-1: SerialNumber: syz [ 104.654811][ T5978] usb 3-1: config 0 descriptor?? [ 104.676695][ T5978] yurex 3-1:0.50: Could not find endpoints [ 104.934048][ T5906] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.167359][ T6199] sp0: Synchronizing with TNC [ 105.257014][ T6199] sp0: Found TNC [ 105.379024][ T6201] mmap: syz.0.68 (6201) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.977111][ T9] usb 3-1: USB disconnect, device number 4 [ 105.983901][ T5906] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.074043][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.225356][ T5906] usb 5-1: Product: syz [ 106.229680][ T5906] usb 5-1: Manufacturer: syz [ 106.234407][ T5906] usb 5-1: SerialNumber: syz [ 106.252976][ T5906] usb 5-1: config 0 descriptor?? [ 106.322867][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 107.051101][ T5906] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.449228][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.532534][ T6218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.74'. [ 107.542719][ T6218] team0: No ports can be present during mode change [ 107.633865][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 107.641393][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.657029][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.672209][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.698398][ T43] usb 4-1: Product: syz [ 107.712857][ T43] usb 4-1: Manufacturer: syz [ 107.720401][ T43] usb 4-1: SerialNumber: syz [ 107.751069][ T43] usb 4-1: config 0 descriptor?? [ 107.760318][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.773021][ T43] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 108.157834][ T5906] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 108.170051][ T5906] usb 5-1: USB disconnect, device number 3 [ 108.544114][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.602915][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 108.911591][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 108.919044][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.964949][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.989839][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.77'. [ 109.001061][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.013557][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 109.022430][ T5899] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.043775][ T5899] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.065324][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.117979][ T43] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.163825][ T43] em28xx 4-1:0.0: board has no eeprom [ 109.284913][ T6235] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 109.309039][ T5899] usb 1-1: GET_CAPABILITIES returned 0 [ 109.325590][ T5899] usbtmc 1-1:16.0: can't read capabilities [ 109.751160][ T5899] usb 1-1: USB disconnect, device number 2 [ 109.925036][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 109.935149][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 110.296542][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 110.403799][ T43] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.520125][ T43] em28xx 4-1:0.0: dvb set to bulk mode. [ 110.578309][ T5899] em28xx 4-1:0.0: Binding DVB extension [ 110.739823][ T43] usb 4-1: USB disconnect, device number 3 [ 110.942634][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 110.971733][ T5899] em28xx 4-1:0.0: Registering input extension [ 110.989534][ T43] em28xx 4-1:0.0: Closing input extension [ 111.105123][ T43] em28xx 4-1:0.0: Freeing device [ 111.209349][ T30] audit: type=1800 audit(1762546481.840:3): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.86" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 112.091086][ T30] audit: type=1326 audit(1762546482.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 112.382893][ T6274] comedi comedi0: Minor 3 could not be opened [ 112.833753][ T30] audit: type=1326 audit(1762546482.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 112.880003][ T30] audit: type=1326 audit(1762546482.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 113.324493][ T30] audit: type=1326 audit(1762546482.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 113.356650][ T30] audit: type=1326 audit(1762546482.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 113.486211][ T30] audit: type=1326 audit(1762546482.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 113.621341][ T30] audit: type=1326 audit(1762546482.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 113.812495][ T30] audit: type=1326 audit(1762546482.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 113.959778][ T6288] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.029746][ T6288] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.374202][ T30] audit: type=1326 audit(1762546482.080:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fee1598f6c9 code=0x7ffc0000 [ 114.848689][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.014077][ T6306] random: crng reseeded on system resumption [ 115.232591][ T24] usb 5-1: config 0 has no interfaces? [ 115.304299][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.324280][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.332464][ T24] usb 5-1: Product: syz [ 115.373390][ T24] usb 5-1: Manufacturer: syz [ 115.401525][ T24] usb 5-1: SerialNumber: syz [ 115.412445][ T6310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.509925][ T24] usb 5-1: config 0 descriptor?? [ 115.920946][ T6323] loop1: detected capacity change from 0 to 512 [ 116.488762][ T6323] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.539407][ T6323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.611066][ T6323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 116.648965][ T6323] System zones: 1-12 [ 116.726052][ T6291] veth0_vlan: left promiscuous mode [ 116.732470][ T6291] veth0_vlan: entered promiscuous mode [ 116.752775][ T24] usb 5-1: USB disconnect, device number 4 [ 116.824229][ T6323] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.914683][ T6323] EXT4-fs (loop1): 1 truncate cleaned up [ 116.947837][ T6323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.115547][ T6323] loop1: detected capacity change from 512 to 0 [ 117.133840][ T6334] EXT4-fs error (device loop1): __ext4_find_entry:1615: inode #2: comm syz.1.107: reading directory lblock 0 [ 117.161028][ T6334] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 117.245274][ T6334] EXT4-fs (loop1): I/O error while writing superblock [ 117.412060][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 117.412076][ T30] audit: type=1800 audit(1762546488.050:24): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.110" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 117.670319][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.729799][ T5815] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 117.740822][ T5815] EXT4-fs (loop1): I/O error while writing superblock [ 118.232406][ T6354] input: syz0 as /devices/virtual/input/input7 [ 118.353240][ T30] audit: type=1326 audit(1762546488.980:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 118.470680][ T30] audit: type=1326 audit(1762546488.980:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 118.552796][ T30] audit: type=1326 audit(1762546488.980:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 118.805913][ T30] audit: type=1326 audit(1762546488.980:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 119.043784][ T30] audit: type=1326 audit(1762546488.980:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 119.153790][ T30] audit: type=1326 audit(1762546488.980:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 119.252177][ T30] audit: type=1326 audit(1762546488.980:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 119.353423][ T30] audit: type=1326 audit(1762546488.980:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 119.425038][ T30] audit: type=1326 audit(1762546488.980:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6b0b98f6c9 code=0x7ffc0000 [ 119.503457][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 119.699014][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.707511][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.715150][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.725135][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.732750][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.025248][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 121.269186][ T6390] Process accounting resumed [ 121.445572][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.489767][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.518346][ T6369] bridge_slave_0: entered allmulticast mode [ 121.585001][ T6369] bridge_slave_0: entered promiscuous mode [ 121.787000][ T5835] Bluetooth: hci0: command tx timeout [ 121.827327][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.834906][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.842155][ T6369] bridge_slave_1: entered allmulticast mode [ 121.850592][ T6369] bridge_slave_1: entered promiscuous mode [ 122.413311][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.464458][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.615419][ T6369] team0: Port device team_slave_0 added [ 122.632770][ T6369] team0: Port device team_slave_1 added [ 122.766581][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.793774][ T5818] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.799698][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.852026][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.880050][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.899219][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.944073][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.966208][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.003756][ T5818] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.025658][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.053947][ T5818] usb 5-1: config 0 descriptor?? [ 123.069313][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 123.311006][ T6369] hsr_slave_0: entered promiscuous mode [ 123.330441][ T6369] hsr_slave_1: entered promiscuous mode [ 123.364966][ T6369] debugfs: 'hsr0' already exists in 'hsr' [ 123.370811][ T6369] Cannot create hsr debugfs directory [ 123.581462][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 123.682876][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 123.820134][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 123.864325][ T5835] Bluetooth: hci0: command tx timeout [ 123.895093][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 123.908739][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 123.924187][ T5818] pwc: recv_control_msg error -32 req 04 val 1400 [ 123.935688][ T5818] pwc: recv_control_msg error -32 req 02 val 2000 [ 123.948180][ T5818] pwc: recv_control_msg error -32 req 02 val 2100 [ 123.971664][ T5818] pwc: recv_control_msg error -32 req 04 val 1500 [ 123.981933][ T5818] pwc: recv_control_msg error -32 req 02 val 2500 [ 124.094886][ T5818] pwc: recv_control_msg error -32 req 02 val 2400 [ 124.309924][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 124.329240][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 124.347486][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 124.367524][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.399824][ T5818] pwc: Registered as video103. [ 124.435337][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 124.447098][ T6369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.474403][ T5818] usb 5-1: USB disconnect, device number 5 [ 124.582542][ T6369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.713570][ T6369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.645549][ T6369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.811262][ T5835] Bluetooth: hci0: command tx timeout [ 129.459424][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.475255][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.506424][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.513628][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.213849][ T5835] Bluetooth: hci0: command tx timeout [ 130.225528][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.232719][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.392832][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.409184][ T6486] fuse: Bad value for 'fd' [ 132.110455][ T6506] overlayfs: missing 'lowerdir' [ 132.183788][ T5946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.252538][ T5818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.894477][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905551][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.933519][ T5818] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 132.965464][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 133.026688][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.045179][ T5818] usb 4-1: Product: syz [ 133.051418][ T5946] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.054581][ T5818] usb 4-1: Manufacturer: syz [ 133.082231][ T5818] usb 4-1: SerialNumber: syz [ 133.086225][ T5946] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.097993][ T5818] usb 4-1: config 0 descriptor?? [ 133.108143][ T6503] could not allocate digest TFM handle cryptd(blake2b-160) [ 133.116501][ T5946] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 133.123544][ T5818] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 133.154391][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.159429][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.180237][ T5946] usb 1-1: config 0 descriptor?? [ 133.180999][ T5818] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 133.204183][ T5818] usb 4-1: media controller created [ 133.215085][ T5946] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.224694][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.231404][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.318331][ T24] usb 1-1: USB disconnect, device number 3 [ 133.351213][ T6500] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 133.407139][ T5818] DVB: Unable to find symbol mt352_attach() [ 133.498417][ T5818] DVB: Unable to find symbol nxt6000_attach() [ 133.524509][ T5818] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 133.553953][ T5818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 133.583539][ T5818] dvb-usb: schedule remote query interval to 1000 msecs. [ 133.594905][ T5818] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 133.621833][ T5818] dvb-usb: bulk message failed: -22 (7/0) [ 133.629680][ T5818] dvb-usb: bulk message failed: -22 (7/0) [ 133.659728][ T5818] usb 4-1: USB disconnect, device number 4 [ 133.815767][ T5818] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 135.236938][ T6369] veth0_vlan: entered promiscuous mode [ 135.268324][ T6369] veth1_vlan: entered promiscuous mode [ 135.557289][ T6369] veth0_macvtap: entered promiscuous mode [ 135.586475][ T6369] veth1_macvtap: entered promiscuous mode [ 135.738644][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.756348][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.772426][ T5957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.414528][ T5957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.500605][ T5957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.593029][ T5957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.621525][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 136.621580][ T30] audit: type=1804 audit(1762546507.230:67): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.174" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 136.976080][ T30] audit: type=1800 audit(1762546507.230:68): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.174" name="/" dev="fuse" ino=1 res=0 errno=0 [ 137.699660][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.882738][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.985312][ T5958] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.116147][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.134091][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.674647][ T5946] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.883993][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 140.024648][ T5946] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 140.032069][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.617594][ T5946] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.650239][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.679392][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.712830][ T5946] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 140.743885][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.758169][ T5946] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.770184][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.781581][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.795105][ T5946] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 140.802516][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.890301][ T5946] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.054273][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.675295][ T5946] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.690243][ T5946] usb 5-1: string descriptor 0 read error: -22 [ 141.696933][ T5946] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 141.763738][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.880560][ T5946] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 143.416358][ T6635] fuse: Bad value for 'fd' [ 143.761426][ T30] audit: type=1804 audit(1762546514.400:69): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.199" name="/newroot/42/file1" dev="fuse" ino=1 res=1 errno=0 [ 143.960773][ T30] audit: type=1800 audit(1762546514.400:70): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.199" name="/" dev="fuse" ino=1 res=0 errno=0 [ 146.233933][ T43] usb 5-1: USB disconnect, device number 6 [ 149.237605][ T6702] netlink: 'syz.0.218': attribute type 3 has an invalid length. [ 150.966565][ T6725] netlink: 'syz.5.225': attribute type 1 has an invalid length. [ 150.974305][ T6725] netlink: 'syz.5.225': attribute type 2 has an invalid length. [ 151.185623][ T6727] trusted_key: encrypted_key: insufficient parameters specified [ 152.899838][ T6739] netlink: 'syz.5.229': attribute type 1 has an invalid length. [ 152.907836][ T6739] netlink: 244 bytes leftover after parsing attributes in process `syz.5.229'. [ 152.917690][ T6739] NCSI netlink: No device for ifindex 9628930 [ 153.783989][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.232'. [ 156.599557][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.243'. [ 158.024000][ T6796] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 159.206746][ T6796] orangefs_mount: mount request failed with -4 [ 159.470637][ T5835] Bluetooth: hci3: hcon ffff888031570000 sent 1 < count 65534 [ 159.508545][ T5835] Bluetooth: hci3: hcon ffff88807a434000 sent 1 < count 1023 [ 159.516427][ T5835] Bluetooth: hci3: hcon ffff888031570000 sent 0 < count 32769 [ 159.553114][ T5835] Bluetooth: hci3: hcon ffff888031570000 sent 0 < count 1 [ 159.560327][ T5835] Bluetooth: hci3: hcon ffff88807a434000 sent 0 < count 2 [ 162.799381][ T6846] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 163.732859][ T6868] tipc: Started in network mode [ 163.743598][ T6868] tipc: Node identity ea76f6578265, cluster identity 4711 [ 163.770165][ T6868] tipc: Enabled bearer , priority 0 [ 163.794308][ T6846] orangefs_mount: mount request failed with -4 [ 163.799119][ T6871] syzkaller0: entered promiscuous mode [ 163.818424][ T6871] syzkaller0: entered allmulticast mode [ 163.874850][ T6868] tipc: Resetting bearer [ 163.975118][ T6866] tipc: Resetting bearer [ 164.100883][ T6866] tipc: Disabling bearer [ 164.917530][ T6889] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.282'. [ 165.333827][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.106207][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.117311][ T5892] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.143766][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.262542][ T5892] usb 6-1: config 0 descriptor?? [ 166.291322][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 166.526456][ T6910] netlink: 'syz.4.287': attribute type 3 has an invalid length. [ 167.063423][ T6915] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 167.071148][ T6915] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 168.376223][ T5892] pwc: recv_control_msg error -71 req 02 val 2b00 [ 168.478885][ T5892] pwc: recv_control_msg error -71 req 02 val 2700 [ 168.504306][ T5892] pwc: recv_control_msg error -71 req 02 val 2c00 [ 169.061974][ T5892] pwc: recv_control_msg error -71 req 04 val 1000 [ 169.093883][ T5892] pwc: recv_control_msg error -71 req 04 val 1300 [ 169.134140][ T5892] pwc: recv_control_msg error -71 req 04 val 1400 [ 169.171672][ T5892] pwc: recv_control_msg error -71 req 02 val 2000 [ 169.305496][ T5892] pwc: recv_control_msg error -71 req 02 val 2100 [ 169.312789][ T5892] pwc: recv_control_msg error -71 req 04 val 1500 [ 169.324281][ T5892] pwc: recv_control_msg error -71 req 02 val 2500 [ 169.331126][ T5892] pwc: recv_control_msg error -71 req 02 val 2400 [ 169.338090][ T5892] pwc: recv_control_msg error -71 req 02 val 2600 [ 169.348194][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 169.947044][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 169.970231][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 170.004125][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 170.021102][ T5892] pwc: Registered as video103. [ 170.030059][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 170.054299][ T5892] usb 6-1: USB disconnect, device number 2 [ 171.754867][ T6947] syzkaller1: entered promiscuous mode [ 171.760342][ T6947] syzkaller1: entered allmulticast mode [ 172.869705][ T6973] F2FS-fs: Conflicting test_dummy_encryption options [ 173.737309][ T5892] ------------[ cut here ]------------ [ 173.742976][ T5892] WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0, CPU#0: kworker/0:4/5892 [ 173.754146][ T5892] Modules linked in: [ 173.758219][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 173.768513][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.778644][ T5892] Workqueue: events destroy_super_work [ 173.785130][ T5892] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 173.791718][ T5892] Code: d7 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c d7 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 f5 56 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 56 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 173.812013][ T5892] RSP: 0000:ffffc900042ffa48 EFLAGS: 00010293 [ 173.818234][ T5892] RAX: ffffffff823b293b RBX: ffff888078288898 RCX: ffff888058221e80 [ 173.826350][ T5892] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 173.834370][ T5892] RBP: 0000000000000004 R08: ffff888058afc193 R09: 1ffff1100b15f832 [ 173.842353][ T5892] R10: dffffc0000000000 R11: ffffed100b15f833 R12: ffff888058afc190 [ 173.850445][ T5892] R13: dffffc0000000000 R14: ffff888078288000 R15: ffff888058afc000 [ 173.858475][ T5892] FS: 0000000000000000(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000 [ 173.867555][ T5892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.874182][ T5892] CR2: 00005634add28e28 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 173.882165][ T5892] Call Trace: [ 173.886252][ T5892] [ 173.889187][ T5892] ? process_one_work+0x868/0x15d0 [ 173.894849][ T5892] process_one_work+0x94a/0x15d0 [ 173.899806][ T5892] ? __lock_acquire+0xab9/0xd20 [ 173.904737][ T5892] ? __pfx_process_one_work+0x10/0x10 [ 173.910131][ T5892] ? assign_work+0x3a1/0x410 [ 173.914790][ T5892] worker_thread+0x9b0/0xee0 [ 173.919415][ T5892] kthread+0x711/0x8a0 [ 173.923482][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 173.928630][ T5892] ? __pfx_kthread+0x10/0x10 [ 173.933229][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.938557][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.943822][ T5892] ? __pfx_kthread+0x10/0x10 [ 173.948421][ T5892] ret_from_fork+0x599/0xb30 [ 173.953023][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 173.958226][ T5892] ? __switch_to_asm+0x39/0x70 [ 173.962992][ T5892] ? __switch_to_asm+0x33/0x70 [ 173.967795][ T5892] ? __pfx_kthread+0x10/0x10 [ 173.972366][ T5892] ret_from_fork_asm+0x1a/0x30 [ 173.977152][ T5892] [ 173.980156][ T5892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.987410][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 173.996757][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.006789][ T5892] Workqueue: events destroy_super_work [ 174.012231][ T5892] Call Trace: [ 174.015489][ T5892] [ 174.018396][ T5892] dump_stack_lvl+0x99/0x250 [ 174.022964][ T5892] ? __asan_memcpy+0x40/0x70 [ 174.027535][ T5892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.032712][ T5892] ? __pfx__printk+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 174.037302][ T5892] vpanic+0x237/0x6d0 [ 174.041289][ T5892] ? __pfx_vpanic+0x10/0x10 [ 174.045788][ T5892] ? is_bpf_text_address+0x292/0x2b0 [ 174.051062][ T5892] ? is_bpf_text_address+0x26/0x2b0 [ 174.056250][ T5892] panic+0xb9/0xc0 [ 174.059954][ T5892] ? __pfx_panic+0x10/0x10 [ 174.064356][ T5892] ? ret_from_fork_asm+0x1a/0x30 [ 174.069278][ T5892] __warn+0x334/0x4c0 [ 174.073237][ T5892] ? destroy_super_work+0x15c/0x1a0 [ 174.078420][ T5892] ? destroy_super_work+0x15c/0x1a0 [ 174.083601][ T5892] report_bug+0x2be/0x4f0 [ 174.087916][ T5892] ? destroy_super_work+0x15c/0x1a0 [ 174.093100][ T5892] ? destroy_super_work+0x15c/0x1a0 [ 174.098286][ T5892] ? destroy_super_work+0x15e/0x1a0 [ 174.103471][ T5892] handle_bug+0x84/0x160 [ 174.107697][ T5892] exc_invalid_op+0x1a/0x50 [ 174.112190][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 174.117026][ T5892] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 174.122815][ T5892] Code: d7 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c d7 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 f5 56 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 56 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 174.142406][ T5892] RSP: 0000:ffffc900042ffa48 EFLAGS: 00010293 [ 174.148467][ T5892] RAX: ffffffff823b293b RBX: ffff888078288898 RCX: ffff888058221e80 [ 174.156430][ T5892] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 174.164387][ T5892] RBP: 0000000000000004 R08: ffff888058afc193 R09: 1ffff1100b15f832 [ 174.172345][ T5892] R10: dffffc0000000000 R11: ffffed100b15f833 R12: ffff888058afc190 [ 174.180302][ T5892] R13: dffffc0000000000 R14: ffff888078288000 R15: ffff888058afc000 [ 174.188280][ T5892] ? destroy_super_work+0x15b/0x1a0 [ 174.193522][ T5892] ? destroy_super_work+0x15b/0x1a0 [ 174.198718][ T5892] ? process_one_work+0x868/0x15d0 [ 174.203816][ T5892] process_one_work+0x94a/0x15d0 [ 174.208739][ T5892] ? __lock_acquire+0xab9/0xd20 [ 174.213594][ T5892] ? __pfx_process_one_work+0x10/0x10 [ 174.218959][ T5892] ? assign_work+0x3a1/0x410 [ 174.223542][ T5892] worker_thread+0x9b0/0xee0 [ 174.228140][ T5892] kthread+0x711/0x8a0 [ 174.232194][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 174.237291][ T5892] ? __pfx_kthread+0x10/0x10 [ 174.241864][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.247046][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.252232][ T5892] ? __pfx_kthread+0x10/0x10 [ 174.256805][ T5892] ret_from_fork+0x599/0xb30 [ 174.261384][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 174.266488][ T5892] ? __switch_to_asm+0x39/0x70 [ 174.271232][ T5892] ? __switch_to_asm+0x33/0x70 [ 174.275974][ T5892] ? __pfx_kthread+0x10/0x10 [ 174.280551][ T5892] ret_from_fork_asm+0x1a/0x30 [ 174.285316][ T5892] [ 174.288588][ T5892] Kernel Offset: disabled [ 174.292925][ T5892] Rebooting in 86400 seconds..