last executing test programs: 14.46570838s ago: executing program 4 (id=72): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000280)={0x80000000, 0x3ff, 0x2, {0x1, @win={{}, 0x0, 0xb42d9aa9, 0x0, 0x0, 0x0, 0xfd}}, 0xfffffffe}) 13.568035263s ago: executing program 4 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 7', @ANYRESDEC], 0xd) ioprio_set$pid(0x1, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.613944088s ago: executing program 1 (id=99): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x3, 0x4, 0x0, 'queue0\x00', 0xcc57}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7.832718343s ago: executing program 1 (id=103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x10, 0x117, 0x4, 0x5}], 0x10, 0x40}, 0x4040880) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x60, 0x0) 7.639171104s ago: executing program 3 (id=104): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 7.221491058s ago: executing program 1 (id=106): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001"], 0x0) syz_usb_connect$uac1(0x0, 0x109, &(0x7f00000001c0)=ANY=[], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0) 7.218814954s ago: executing program 0 (id=107): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 6.500963435s ago: executing program 0 (id=109): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/109, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 5.905532636s ago: executing program 3 (id=111): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.766678448s ago: executing program 0 (id=112): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x8}, 0x2) 5.125423674s ago: executing program 3 (id=113): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xa400}, {r0, 0x3000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(r0, 0x0) 5.048955576s ago: executing program 1 (id=114): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) open(0x0, 0x80ff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat(0xffffffffffffff9c, 0x0, 0x208180, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x8, 0x40600) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010202000008"], &(0x7f0000001080)={0x0, 0x0, 0xf, 0x0}) 4.798144364s ago: executing program 0 (id=115): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x11, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x111}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f00000019c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x4000, 0x1}) 4.344892034s ago: executing program 3 (id=116): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000000004079215300000000000001090224"], 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000640)="8a", 0x1}], 0x1}, 0x40008c1) 4.049743509s ago: executing program 0 (id=117): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x9, 0x2, 0x0, "e70db065a8f336759e205977fcc7350201000000398500ff03eb6beb8bf93566", 0x30314247}) 3.948592072s ago: executing program 2 (id=118): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000180)) 3.446671682s ago: executing program 0 (id=119): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) 3.405671934s ago: executing program 2 (id=120): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x9, 0x592, 0xa}, 0x10) 2.955888099s ago: executing program 2 (id=121): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xf9}, 0x1, {0x3600}}}}}}}}, 0x0) 2.602793253s ago: executing program 2 (id=122): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x4014) 2.42169173s ago: executing program 4 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.421509391s ago: executing program 3 (id=124): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001"], 0x0) syz_usb_connect$uac1(0x0, 0x109, &(0x7f00000001c0)=ANY=[], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0) 1.96464343s ago: executing program 2 (id=125): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(0xffffffffffffffff, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 1.397313438s ago: executing program 4 (id=126): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xa400}, {r0, 0x3000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(r0, 0x0) 1.333446867s ago: executing program 1 (id=127): syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.225707329s ago: executing program 2 (id=128): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) ppoll(&(0x7f0000000240)=[{r0, 0x2406}], 0x1, 0x0, 0x0, 0x0) 678.715918ms ago: executing program 4 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 254.030688ms ago: executing program 3 (id=130): unshare(0x2a000400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$setsig(r0, 0xa, 0x21) 87.172642ms ago: executing program 4 (id=131): openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') write$vga_arbiter(r0, 0x0, 0x0) 0s ago: executing program 1 (id=132): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x8000000, 0x0, 0x3432564e, 0x5, 0x6, [{0xfffffffd}, {0x1}, {}, {0x0, 0x7}, {}, {0xfffffffe}, {0x0, 0x2}, {0x0, 0xfffffffe}], 0x0, 0x4, 0x4, 0x0, 0x5}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 172.534331][ T5766] cgroup: Unknown subsys name 'net' [ 172.664723][ T5766] cgroup: Unknown subsys name 'cpuset' [ 172.679214][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 217.311029][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 221.746646][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.755073][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.771745][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.780179][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.788700][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.796766][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.805761][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.815316][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.823264][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.828393][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.833180][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.838626][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.852649][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.858076][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.866168][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.869017][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.880936][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.882830][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.890144][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.901647][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.905139][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.910626][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.921948][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.925247][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.933989][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.947778][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.958851][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.978438][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.025807][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.043014][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.850021][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 223.911226][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 223.933310][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.941164][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.949033][ T5783] bridge_slave_0: entered allmulticast mode [ 223.958134][ T5783] bridge_slave_0: entered promiscuous mode [ 223.983049][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.990932][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.998853][ T5783] bridge_slave_1: entered allmulticast mode [ 224.007791][ T5783] bridge_slave_1: entered promiscuous mode [ 224.038010][ T5080] Bluetooth: hci4: command tx timeout [ 224.043824][ T5080] Bluetooth: hci0: command tx timeout [ 224.049906][ T5080] Bluetooth: hci1: command tx timeout [ 224.069935][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 224.087096][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 224.125723][ T5784] Bluetooth: hci2: command tx timeout [ 224.126105][ T5080] Bluetooth: hci3: command tx timeout [ 224.296650][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.308365][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 224.414743][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.422502][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.465945][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.746859][ T5783] team0: Port device team_slave_0 added [ 224.794213][ T5783] team0: Port device team_slave_1 added [ 225.137111][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.144379][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.172869][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.262801][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.270646][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.278580][ T5788] bridge_slave_0: entered allmulticast mode [ 225.287633][ T5788] bridge_slave_0: entered promiscuous mode [ 225.301397][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.308773][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.335227][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.350259][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.361464][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.369571][ T5790] bridge_slave_0: entered allmulticast mode [ 225.377885][ T5790] bridge_slave_0: entered promiscuous mode [ 225.425241][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.432920][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.440701][ T5788] bridge_slave_1: entered allmulticast mode [ 225.449782][ T5788] bridge_slave_1: entered promiscuous mode [ 225.631186][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.639024][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.648889][ T5790] bridge_slave_1: entered allmulticast mode [ 225.661339][ T5790] bridge_slave_1: entered promiscuous mode [ 225.672241][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.680133][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.687908][ T5782] bridge_slave_0: entered allmulticast mode [ 225.696833][ T5782] bridge_slave_0: entered promiscuous mode [ 225.773622][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.781466][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.789286][ T5786] bridge_slave_0: entered allmulticast mode [ 225.797850][ T5786] bridge_slave_0: entered promiscuous mode [ 225.814039][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.821877][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.832234][ T5786] bridge_slave_1: entered allmulticast mode [ 225.842470][ T5786] bridge_slave_1: entered promiscuous mode [ 225.852583][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.860490][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.869299][ T5782] bridge_slave_1: entered allmulticast mode [ 225.878511][ T5782] bridge_slave_1: entered promiscuous mode [ 226.080108][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.101614][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.118058][ T5080] Bluetooth: hci1: command tx timeout [ 226.123780][ T5784] Bluetooth: hci0: command tx timeout [ 226.130888][ T5784] Bluetooth: hci4: command tx timeout [ 226.156982][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.195580][ T5080] Bluetooth: hci2: command tx timeout [ 226.195714][ T5794] Bluetooth: hci3: command tx timeout [ 226.215898][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.234666][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.256871][ T5783] hsr_slave_0: entered promiscuous mode [ 226.266610][ T5783] hsr_slave_1: entered promiscuous mode [ 226.316943][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.336266][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.418283][ T5790] team0: Port device team_slave_0 added [ 226.494736][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.544249][ T5790] team0: Port device team_slave_1 added [ 226.561273][ T5786] team0: Port device team_slave_0 added [ 226.611538][ T5788] team0: Port device team_slave_0 added [ 226.654339][ T5786] team0: Port device team_slave_1 added [ 226.750041][ T5788] team0: Port device team_slave_1 added [ 226.928511][ T5782] team0: Port device team_slave_0 added [ 226.955185][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.962345][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.988631][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.018445][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.025784][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.052293][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.066434][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.073604][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.100358][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.155706][ T5782] team0: Port device team_slave_1 added [ 227.201542][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.208766][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.235211][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.265045][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.272164][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.298649][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.421288][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.428786][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.455690][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.505074][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.512258][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.538724][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.558506][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.565870][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.592315][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.825248][ T5786] hsr_slave_0: entered promiscuous mode [ 227.835364][ T5786] hsr_slave_1: entered promiscuous mode [ 227.843770][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.851594][ T5786] Cannot create hsr debugfs directory [ 227.895736][ T5790] hsr_slave_0: entered promiscuous mode [ 227.905549][ T5790] hsr_slave_1: entered promiscuous mode [ 227.913943][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.921907][ T5790] Cannot create hsr debugfs directory [ 228.096614][ T5788] hsr_slave_0: entered promiscuous mode [ 228.106399][ T5788] hsr_slave_1: entered promiscuous mode [ 228.114983][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.122909][ T5788] Cannot create hsr debugfs directory [ 228.149813][ T5782] hsr_slave_0: entered promiscuous mode [ 228.158764][ T5782] hsr_slave_1: entered promiscuous mode [ 228.167167][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.175063][ T5782] Cannot create hsr debugfs directory [ 228.209452][ T5794] Bluetooth: hci1: command tx timeout [ 228.210221][ T5080] Bluetooth: hci4: command tx timeout [ 228.215080][ T5794] Bluetooth: hci0: command tx timeout [ 228.280706][ T5794] Bluetooth: hci2: command tx timeout [ 228.281265][ T5080] Bluetooth: hci3: command tx timeout [ 228.668664][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.797605][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.884119][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.919539][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.598640][ T5786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.684431][ T5786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.708458][ T5786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.764208][ T5786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.788751][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.907911][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.970088][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.035201][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.056193][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.132892][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.159628][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.246097][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.283396][ T5080] Bluetooth: hci0: command tx timeout [ 230.283518][ T5794] Bluetooth: hci4: command tx timeout [ 230.289566][ T5784] Bluetooth: hci1: command tx timeout [ 230.355596][ T5794] Bluetooth: hci2: command tx timeout [ 230.361235][ T5794] Bluetooth: hci3: command tx timeout [ 230.367744][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.408448][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.465858][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.513846][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.632361][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.837868][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.028297][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.036063][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.091174][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.098984][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.164038][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.379260][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.541808][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.549525][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.633569][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.641293][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.815411][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.850665][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.001349][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.104537][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.155839][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.227701][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.235407][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.250507][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.258346][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.289163][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.446723][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.454376][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.470576][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.478438][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.503294][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.511062][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.727847][ T5788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.738772][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.776761][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.784386][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.781760][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.960389][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.300618][ T5783] veth0_vlan: entered promiscuous mode [ 234.459733][ T5783] veth1_vlan: entered promiscuous mode [ 234.680284][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.773451][ T5783] veth0_macvtap: entered promiscuous mode [ 234.842332][ T5783] veth1_macvtap: entered promiscuous mode [ 234.862538][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.000487][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.128241][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.209242][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.279994][ T5788] veth0_vlan: entered promiscuous mode [ 235.297156][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.307151][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.317986][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.327116][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.484643][ T5788] veth1_vlan: entered promiscuous mode [ 235.631322][ T5790] veth0_vlan: entered promiscuous mode [ 235.663224][ T5782] veth0_vlan: entered promiscuous mode [ 235.766167][ T5790] veth1_vlan: entered promiscuous mode [ 235.792083][ T5782] veth1_vlan: entered promiscuous mode [ 235.934372][ T5788] veth0_macvtap: entered promiscuous mode [ 236.059201][ T5788] veth1_macvtap: entered promiscuous mode [ 236.191590][ T5790] veth0_macvtap: entered promiscuous mode [ 236.222154][ T5782] veth0_macvtap: entered promiscuous mode [ 236.239539][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.251598][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.268866][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.314579][ T5790] veth1_macvtap: entered promiscuous mode [ 236.339543][ T5782] veth1_macvtap: entered promiscuous mode [ 236.380470][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.391399][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.406794][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.517624][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.528551][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.538763][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.549579][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.564256][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.598084][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.607303][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.617585][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.627694][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.716785][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.728693][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.740076][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.750903][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.765882][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.812438][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.823265][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.833522][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.845330][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.856018][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.866984][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.881908][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.938102][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.947215][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.956512][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.965616][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.035217][ T5786] veth0_vlan: entered promiscuous mode [ 237.075607][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.086375][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.096579][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.107348][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.117433][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.128141][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.142761][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.217207][ T5786] veth1_vlan: entered promiscuous mode [ 237.326190][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.335320][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.344311][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.353548][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.623628][ T5786] veth0_macvtap: entered promiscuous mode [ 237.713348][ T5786] veth1_macvtap: entered promiscuous mode [ 237.885562][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.896353][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.906537][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.917291][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.927429][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.938260][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.948476][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.960003][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.975451][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.162480][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.176822][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.187321][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.198685][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.209345][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.220121][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.230239][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.240978][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.255958][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.508768][ T5786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.519118][ T5786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.531015][ T5786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.541522][ T5786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.086257][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.094327][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.361219][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.370108][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.080663][ T5783] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 243.505564][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.513620][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.721422][ T5965] tipc: Can't bind to reserved service type 2 [ 243.740127][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.748407][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.928937][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.937982][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.109949][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.119342][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.280678][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.288873][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.308259][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.317151][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.615519][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.623487][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.953344][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.961637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.275119][ T5414] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 246.479098][ T5414] usb 1-1: device descriptor read/64, error -71 [ 246.745591][ T5414] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 246.945490][ T5414] usb 1-1: device descriptor read/64, error -71 [ 247.063340][ T5414] usb usb1-port1: attempt power cycle [ 247.176883][ T5997] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.275472][ T2228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 247.425665][ T5414] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 247.457673][ T5414] usb 1-1: device descriptor read/8, error -71 [ 247.462033][ T2228] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 247.462159][ T2228] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.462348][ T2228] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 247.462478][ T2228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.492596][ T2228] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 247.705229][ T5414] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 247.742614][ T5414] usb 1-1: device descriptor read/8, error -71 [ 247.745542][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.746664][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.780932][ T5870] usb 2-1: USB disconnect, device number 2 [ 247.854434][ T5414] usb usb1-port1: unable to enumerate USB device [ 248.979773][ T6018] trusted_key: syz.1.20 sent an empty control message without MSG_MORE. [ 249.774389][ T29] audit: type=1800 audit(1738456645.520:2): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25" name="file1" dev="tmpfs" ino=38 res=0 errno=0 [ 251.375795][ T5414] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 251.580314][ T5414] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 251.591188][ T5414] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.604754][ T5414] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 251.615361][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.817004][ T5414] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 251.857827][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.059192][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.069123][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.161856][ T5414] usb 5-1: USB disconnect, device number 2 [ 252.178936][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 252.384510][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 252.401865][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.414178][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.424671][ T5870] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 252.446253][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.493231][ T5870] usb 1-1: config 0 descriptor?? [ 252.971692][ T5870] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 253.126076][ T5870] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 253.344282][ T5870] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 253.543604][ T5870] ft260 0003:0403:6030.0001: failed to retrieve status: -71, no wakeup [ 253.635730][ T5870] ft260 0003:0403:6030.0001: failed to retrieve status: -71 [ 253.666126][ T5870] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 253.769920][ T5870] usb 1-1: USB disconnect, device number 6 [ 255.686381][ T6064] dccp_close: ABORT with 60 bytes unread [ 255.985179][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 256.196125][ T5870] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 256.206896][ T5870] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.227167][ T5870] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 256.238500][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.410492][ T5870] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 256.587429][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.597770][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.698757][ T5870] usb 4-1: USB disconnect, device number 2 [ 257.395149][ T2228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 257.615320][ T2228] usb 2-1: Using ep0 maxpacket: 16 [ 257.705780][ T2228] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 257.716178][ T2228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.724430][ T2228] usb 2-1: Product: syz [ 257.729585][ T2228] usb 2-1: Manufacturer: syz [ 257.734408][ T2228] usb 2-1: SerialNumber: syz [ 257.878022][ T2228] r8152-cfgselector 2-1: Unknown version 0x0000 [ 257.884530][ T2228] r8152-cfgselector 2-1: config 0 descriptor?? [ 258.148173][ T2228] r8152-cfgselector 2-1: Needed 1 retries to read version [ 258.155872][ T2228] r8152-cfgselector 2-1: Unknown version 0x2050 [ 258.164187][ T2228] r8152-cfgselector 2-1: bad CDC descriptors [ 258.415355][ T2228] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 259.475421][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 259.710933][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 259.729100][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.739663][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.749804][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 259.787406][ T5870] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 259.795839][ T2228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.796984][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.820997][ T5870] usb 3-1: Product: syz [ 259.825548][ T5870] usb 3-1: Manufacturer: syz [ 259.830391][ T5870] usb 3-1: SerialNumber: syz [ 259.936472][ T5870] usb 3-1: config 0 descriptor?? [ 259.988616][ T5870] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 259.996424][ T5870] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 260.036836][ T2228] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 260.048274][ T2228] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.061716][ T2228] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 260.071178][ T2228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.221214][ T5870] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 260.277664][ T2228] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 260.322411][ T5870] usb 3-1: USB disconnect, device number 2 [ 260.484500][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.496318][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.536346][ T2228] usb 2-1: USB disconnect, device number 4 [ 263.735216][ T2228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.977647][ T2228] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 263.988274][ T2228] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.002773][ T2228] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 264.012586][ T2228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.182811][ T2228] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 264.439466][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.449467][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.544484][ T5870] usb 1-1: USB disconnect, device number 7 [ 266.505088][ T29] audit: type=1800 audit(1738456662.260:3): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.100" name="file1" dev="tmpfs" ino=144 res=0 errno=0 [ 267.935060][ T5870] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 268.132744][ T5870] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 268.144704][ T5870] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.158425][ T5870] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 268.167871][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.338485][ T5870] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 268.573469][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.583344][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.702812][ T5844] usb 2-1: USB disconnect, device number 5 [ 268.745188][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 268.960282][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 268.990686][ T5870] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 268.999333][ T5870] usb 3-1: config 0 has no interface number 0 [ 269.005872][ T5870] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.023989][ T5870] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.036439][ T5870] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.049876][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 269.059313][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.175674][ T5870] usb 3-1: config 0 descriptor?? [ 269.673928][ T5870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 269.682189][ T5870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 269.690574][ T5870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 269.698383][ T5870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 269.706255][ T5870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 269.714082][ T5870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 269.963660][ T5870] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 270.006837][ T5870] usb 3-1: USB disconnect, device number 3 [ 270.097498][ T29] audit: type=1800 audit(1738456665.850:4): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.115" name="file1" dev="tmpfs" ino=142 res=0 errno=0 [ 270.149330][ T5844] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 270.335181][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 270.424061][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.432321][ T5844] usb 2-1: no configurations [ 270.442128][ T5844] usb 2-1: can't read configurations, error -22 [ 270.627001][ T5844] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.775251][ T2228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 270.835379][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 270.872359][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.880544][ T5844] usb 2-1: no configurations [ 270.885470][ T5844] usb 2-1: can't read configurations, error -22 [ 270.933768][ T5844] usb usb2-port1: attempt power cycle [ 270.968060][ T2228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.978816][ T2228] usb 4-1: config 0 has no interfaces? [ 270.984538][ T2228] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 270.994074][ T2228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.107955][ T2228] usb 4-1: config 0 descriptor?? [ 271.298461][ T5844] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 271.358142][ T5870] usb 4-1: USB disconnect, device number 3 [ 271.389365][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 271.427473][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.435596][ T5844] usb 2-1: no configurations [ 271.442417][ T5844] usb 2-1: can't read configurations, error -22 [ 271.668077][ T5844] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 271.723444][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 271.751842][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.761352][ T5844] usb 2-1: no configurations [ 271.766333][ T5844] usb 2-1: can't read configurations, error -22 [ 271.773526][ T5844] usb usb2-port1: unable to enumerate USB device [ 271.801681][ T5838] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 271.965515][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 272.037789][ T5838] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.047260][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.055826][ T5838] usb 1-1: Product: syz [ 272.060265][ T5838] usb 1-1: Manufacturer: syz [ 272.065215][ T5838] usb 1-1: SerialNumber: syz [ 272.177806][ T5838] usb 1-1: config 0 descriptor?? [ 272.426848][ T5838] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 272.715198][ T2228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.914608][ T2228] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 272.926127][ T2228] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.939816][ T2228] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 272.949287][ T2228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.161591][ T2228] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 273.369134][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.379138][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.509575][ T5844] usb 4-1: USB disconnect, device number 4 [ 273.916352][ T5080] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 273.925282][ T5080] Bluetooth: hci4: Injecting HCI hardware error event [ 273.933866][ T5080] Bluetooth: hci4: hardware error 0x00 [ 274.883092][ T6295] ===================================================== [ 274.890614][ T6295] BUG: KMSAN: uninit-value in full_proxy_write+0x101/0x3f0 [ 274.898611][ T6295] full_proxy_write+0x101/0x3f0 [ 274.903784][ T6295] vfs_write+0x48a/0x1540 [ 274.908624][ T6295] ksys_write+0x240/0x4b0 [ 274.913255][ T6295] __ia32_sys_write+0x91/0xe0 [ 274.920470][ T6295] ia32_sys_call+0x2f4b/0x4180 [ 274.925721][ T6295] __do_fast_syscall_32+0xb0/0x110 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 274.931130][ T6295] do_fast_syscall_32+0x38/0x80 [ 274.936474][ T6295] do_SYSENTER_32+0x1f/0x30 [ 274.942716][ T6295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.949490][ T6295] [ 274.951909][ T6295] Uninit was stored to memory at: [ 274.964574][ T6295] __debugfs_file_get+0xe59/0xef0 [ 274.972963][ T6295] full_proxy_open_regular+0x67/0xa00 [ 274.979061][ T6295] do_dentry_open+0x1bdd/0x26b0 [ 274.984126][ T6295] vfs_open+0x53/0x5b0 [ 274.988668][ T6295] path_openat+0x56a1/0x6250 [ 274.993433][ T6295] do_filp_open+0x268/0x600 [ 274.998323][ T6295] do_sys_openat2+0x1bf/0x2f0 [ 275.003211][ T6295] __ia32_compat_sys_openat+0x298/0x300 [ 275.009256][ T6295] ia32_sys_call+0x2fb4/0x4180 [ 275.014225][ T6295] __do_fast_syscall_32+0xb0/0x110 [ 275.019744][ T6295] do_fast_syscall_32+0x38/0x80 [ 275.025107][ T6295] do_SYSENTER_32+0x1f/0x30 [ 275.029778][ T6295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.036534][ T6295] [ 275.038957][ T6295] Uninit was stored to memory at: [ 275.044223][ T6295] __debugfs_file_get+0xdff/0xef0 [ 275.049629][ T6295] full_proxy_open_regular+0x67/0xa00 [ 275.055365][ T6295] do_dentry_open+0x1bdd/0x26b0 [ 275.067950][ T6295] vfs_open+0x53/0x5b0 [ 275.072244][ T6295] path_openat+0x56a1/0x6250 [ 275.079782][ T6295] do_filp_open+0x268/0x600 [ 275.084476][ T6295] do_sys_openat2+0x1bf/0x2f0 [ 275.089646][ T6295] __ia32_compat_sys_openat+0x298/0x300 [ 275.095537][ T6295] ia32_sys_call+0x2fb4/0x4180 [ 275.100534][ T6295] __do_fast_syscall_32+0xb0/0x110 [ 275.106103][ T6295] do_fast_syscall_32+0x38/0x80 [ 275.111181][ T6295] do_SYSENTER_32+0x1f/0x30 [ 275.116018][ T6295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.122620][ T6295] [ 275.125262][ T6295] Uninit was created at: [ 275.129784][ T6295] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 275.135564][ T6295] __debugfs_file_get+0x31d/0xef0 [ 275.140772][ T6295] full_proxy_open_regular+0x67/0xa00 [ 275.146559][ T6295] do_dentry_open+0x1bdd/0x26b0 [ 275.151612][ T6295] vfs_open+0x53/0x5b0 [ 275.156515][ T6295] path_openat+0x56a1/0x6250 [ 275.168841][ T6295] do_filp_open+0x268/0x600 [ 275.173570][ T6295] do_sys_openat2+0x1bf/0x2f0 [ 275.180963][ T6295] __ia32_compat_sys_openat+0x298/0x300 [ 275.187029][ T6295] ia32_sys_call+0x2fb4/0x4180 [ 275.192070][ T6295] __do_fast_syscall_32+0xb0/0x110 [ 275.197511][ T6295] do_fast_syscall_32+0x38/0x80 [ 275.202603][ T6295] do_SYSENTER_32+0x1f/0x30 [ 275.207444][ T6295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.214018][ T6295] [ 275.216664][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.4.131 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 275.227276][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.238152][ T6295] ===================================================== [ 275.245349][ T6295] Disabling lock debugging due to kernel taint [ 275.251621][ T6295] Kernel panic - not syncing: kmsan.panic set ... [ 275.258199][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.4.131 Tainted: G B 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 275.270159][ T6295] Tainted: [B]=BAD_PAGE [ 275.274416][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.284617][ T6295] Call Trace: [ 275.288014][ T6295] [ 275.291042][ T6295] dump_stack_lvl+0x216/0x2d0 [ 275.295877][ T6295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 275.301878][ T6295] dump_stack+0x1e/0x24 [ 275.306174][ T6295] panic+0x4e2/0xcf0 [ 275.310280][ T6295] ? kmsan_get_metadata+0xf1/0x1c0 [ 275.315576][ T6295] kmsan_report+0x2c7/0x2d0 [ 275.320267][ T6295] ? kmsan_get_metadata+0x13e/0x1c0 [ 275.325642][ T6295] ? __msan_warning+0x95/0x120 [ 275.330575][ T6295] ? full_proxy_write+0x101/0x3f0 [ 275.335759][ T6295] ? vfs_write+0x48a/0x1540 [ 275.340413][ T6295] ? ksys_write+0x240/0x4b0 [ 275.345057][ T6295] ? __ia32_sys_write+0x91/0xe0 [ 275.350055][ T6295] ? ia32_sys_call+0x2f4b/0x4180 [ 275.355171][ T6295] ? __do_fast_syscall_32+0xb0/0x110 [ 275.360610][ T6295] ? do_fast_syscall_32+0x38/0x80 [ 275.365845][ T6295] ? do_SYSENTER_32+0x1f/0x30 [ 275.370670][ T6295] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.377394][ T6295] ? __rcu_read_unlock+0x7b/0xe0 [ 275.382534][ T6295] ? aa_file_perm+0x3de/0x1780 [ 275.387459][ T6295] ? kmsan_get_metadata+0x13e/0x1c0 [ 275.392839][ T6295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 275.398828][ T6295] ? kmsan_get_metadata+0x13e/0x1c0 [ 275.404193][ T6295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 275.410178][ T6295] ? end_current_label_crit_section+0x124/0x2a0 [ 275.416590][ T6295] ? common_file_perm+0x327/0x3c0 [ 275.421771][ T6295] ? kmsan_get_metadata+0x13e/0x1c0 [ 275.427144][ T6295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 275.433138][ T6295] __msan_warning+0x95/0x120 [ 275.437885][ T6295] full_proxy_write+0x101/0x3f0 [ 275.442906][ T6295] ? __pfx_full_proxy_write+0x10/0x10 [ 275.448434][ T6295] vfs_write+0x48a/0x1540 [ 275.452908][ T6295] ? stack_depot_save_flags+0x2c/0x750 [ 275.458562][ T6295] ? kmsan_get_metadata+0x13e/0x1c0 [ 275.463929][ T6295] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 275.470492][ T6295] ksys_write+0x240/0x4b0 [ 275.474973][ T6295] ? kmsan_get_metadata+0x13e/0x1c0 [ 275.480360][ T6295] __ia32_sys_write+0x91/0xe0 [ 275.485199][ T6295] ia32_sys_call+0x2f4b/0x4180 [ 275.490146][ T6295] __do_fast_syscall_32+0xb0/0x110 [ 275.495413][ T6295] ? irqentry_exit+0x16/0x60 [ 275.500190][ T6295] do_fast_syscall_32+0x38/0x80 [ 275.505243][ T6295] do_SYSENTER_32+0x1f/0x30 [ 275.509889][ T6295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.516449][ T6295] RIP: 0023:0xf7fa7579 [ 275.520641][ T6295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.540432][ T6295] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 275.549020][ T6295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 275.557121][ T6295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.565209][ T6295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.573326][ T6295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.581444][ T6295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.589602][ T6295] [ 275.593105][ T6295] Kernel Offset: disabled [ 275.597506][ T6295] Rebooting in 86400 seconds..