last executing test programs: 11.424206771s ago: executing program 4 (id=84): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) 10.459314216s ago: executing program 4 (id=86): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.372509369s ago: executing program 0 (id=87): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.61173814s ago: executing program 4 (id=93): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x980) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.027995245s ago: executing program 2 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x128200}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x78, 0x0, 0xb, {0x3ff, 0x5, 0x0, {0x1, 0xdf5, 0x5, 0xfa6, 0x1, 0x5, 0xd, 0x9b, 0x9, 0x4000, 0x657, r2, r3, 0x1000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) 8.980117795s ago: executing program 4 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 7.481556606s ago: executing program 2 (id=99): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff], [0x2, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x5]], '\x00', [{0x0, 0x1}, {}, {0x0, 0x1}, {0x6}, {}, {}, {}, {}, {}, {0x4}], '\x00', 0x0, 0x0, 0x0, 0x2}) 7.279707852s ago: executing program 0 (id=101): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x30}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 6.702398957s ago: executing program 2 (id=102): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x0, r7}, 0x10) 6.155002541s ago: executing program 3 (id=103): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xa5c04000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000834000/0x2000)=nil, 0x3000, 0x2}) 6.1037258s ago: executing program 1 (id=104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/172, 0xac) 6.019222579s ago: executing program 0 (id=105): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bb0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x2f}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) 5.902371267s ago: executing program 4 (id=106): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ufshcd_upiu\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.638956126s ago: executing program 2 (id=107): unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) 5.311721406s ago: executing program 1 (id=108): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.273159882s ago: executing program 3 (id=109): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$full(0xffffff9c, &(0x7f0000000100), 0x101000, 0x0) read$FUSE(r1, &(0x7f0000001880)={0x2020}, 0x2020) 4.251094807s ago: executing program 2 (id=110): landlock_create_ruleset(&(0x7f0000000000)={0xa0, 0x0, 0x3}, 0x18, 0x0) r0 = io_uring_setup(0x7bda, &(0x7f0000000080)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000002, r1) 4.051915029s ago: executing program 0 (id=111): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.665844019s ago: executing program 3 (id=112): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x1, r2}) 3.259435094s ago: executing program 2 (id=113): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.176000362s ago: executing program 1 (id=114): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r0, &(0x7f0000007f40), 0x400000000000245, 0x10000, 0x0) 2.563212709s ago: executing program 3 (id=115): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r0, 0x0, r2, 0x0, 0x8, 0xd) write$binfmt_elf64(r1, 0x0, 0xfffffd88) 2.540884966s ago: executing program 4 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 2.275547628s ago: executing program 1 (id=117): syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x208, 0x128, 0x128, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth1_virt_wifi\x00', 'veth0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x7}, {0xffffffffffffffff, 0x4, 0x4}, {0xffffffffffffffff, 0x0, 0x5}, 0x8, 0x7ff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.133200166s ago: executing program 3 (id=118): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r0 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 987.970422ms ago: executing program 0 (id=119): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) 915.950109ms ago: executing program 1 (id=120): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 151.32112ms ago: executing program 3 (id=121): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x2) 142.739079ms ago: executing program 1 (id=122): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 0 (id=123): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000005a40), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 169.206116][ T5778] cgroup: Unknown subsys name 'net' [ 169.384726][ T5778] cgroup: Unknown subsys name 'cpuset' [ 169.400464][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 214.568277][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.147129][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.153829][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.896902][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.906051][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.922323][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.931052][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.942707][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.952323][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.962822][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.971188][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.979926][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.993218][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.002129][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.004516][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.014811][ T5807] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.023692][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.025754][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.032888][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.040751][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.048314][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.056783][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.063013][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.072630][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.075737][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.085757][ T5812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.089904][ T5806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.096276][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.119270][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.137765][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.155224][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.184360][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.199955][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.257457][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 221.579882][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 222.049787][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 222.119013][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 222.184735][ T5806] Bluetooth: hci1: command tx timeout [ 222.194432][ T5806] Bluetooth: hci0: command tx timeout [ 222.267299][ T5806] Bluetooth: hci4: command tx timeout [ 222.267514][ T5799] Bluetooth: hci3: command tx timeout [ 222.272902][ T5804] Bluetooth: hci2: command tx timeout [ 222.569351][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.580462][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.590864][ T5794] bridge_slave_0: entered allmulticast mode [ 222.602126][ T5794] bridge_slave_0: entered promiscuous mode [ 222.615194][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 222.633312][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.641068][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.648895][ T5794] bridge_slave_1: entered allmulticast mode [ 222.657888][ T5794] bridge_slave_1: entered promiscuous mode [ 222.701172][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.709032][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.717259][ T5795] bridge_slave_0: entered allmulticast mode [ 222.726181][ T5795] bridge_slave_0: entered promiscuous mode [ 222.778142][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.786092][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.794113][ T5795] bridge_slave_1: entered allmulticast mode [ 222.803080][ T5795] bridge_slave_1: entered promiscuous mode [ 222.895871][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.978810][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.195609][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.212365][ T5794] team0: Port device team_slave_0 added [ 223.229286][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.239384][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.249292][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.257283][ T5803] bridge_slave_0: entered allmulticast mode [ 223.265936][ T5803] bridge_slave_0: entered promiscuous mode [ 223.322585][ T5794] team0: Port device team_slave_1 added [ 223.331618][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.339912][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.347898][ T5803] bridge_slave_1: entered allmulticast mode [ 223.357158][ T5803] bridge_slave_1: entered promiscuous mode [ 223.597562][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.605588][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.613305][ T5802] bridge_slave_0: entered allmulticast mode [ 223.624101][ T5802] bridge_slave_0: entered promiscuous mode [ 223.647006][ T5795] team0: Port device team_slave_0 added [ 223.659707][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.668226][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.695484][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.717294][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.745390][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.753095][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.761116][ T5802] bridge_slave_1: entered allmulticast mode [ 223.770159][ T5802] bridge_slave_1: entered promiscuous mode [ 223.793840][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.806758][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.814131][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.840980][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.970158][ T5795] team0: Port device team_slave_1 added [ 224.205961][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.213143][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.239535][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.265211][ T5804] Bluetooth: hci0: command tx timeout [ 224.270906][ T5806] Bluetooth: hci1: command tx timeout [ 224.316147][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.323829][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.331574][ T5808] bridge_slave_0: entered allmulticast mode [ 224.339916][ T5808] bridge_slave_0: entered promiscuous mode [ 224.344420][ T5804] Bluetooth: hci3: command tx timeout [ 224.351491][ T5804] Bluetooth: hci2: command tx timeout [ 224.352401][ T5806] Bluetooth: hci4: command tx timeout [ 224.367948][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.376146][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.383817][ T5808] bridge_slave_1: entered allmulticast mode [ 224.392669][ T5808] bridge_slave_1: entered promiscuous mode [ 224.403299][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.410597][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.437181][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.461009][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.491778][ T5803] team0: Port device team_slave_0 added [ 224.611290][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.628939][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.643818][ T5803] team0: Port device team_slave_1 added [ 224.691097][ T5794] hsr_slave_0: entered promiscuous mode [ 224.700231][ T5794] hsr_slave_1: entered promiscuous mode [ 224.719674][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.909354][ T5802] team0: Port device team_slave_0 added [ 224.923854][ T5808] team0: Port device team_slave_0 added [ 224.937842][ T5802] team0: Port device team_slave_1 added [ 225.006868][ T5808] team0: Port device team_slave_1 added [ 225.028238][ T5795] hsr_slave_0: entered promiscuous mode [ 225.038283][ T5795] hsr_slave_1: entered promiscuous mode [ 225.047018][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.054902][ T5795] Cannot create hsr debugfs directory [ 225.089848][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.097240][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.123671][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.262445][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.270651][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.298092][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.313033][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.320433][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.346907][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.402148][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.409766][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.436125][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.466125][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.473297][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.500701][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.573152][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.580679][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.607900][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.880651][ T5808] hsr_slave_0: entered promiscuous mode [ 225.890218][ T5808] hsr_slave_1: entered promiscuous mode [ 225.899895][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.907790][ T5808] Cannot create hsr debugfs directory [ 226.024150][ T5803] hsr_slave_0: entered promiscuous mode [ 226.034621][ T5803] hsr_slave_1: entered promiscuous mode [ 226.043009][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.051008][ T5803] Cannot create hsr debugfs directory [ 226.124563][ T5802] hsr_slave_0: entered promiscuous mode [ 226.135189][ T5802] hsr_slave_1: entered promiscuous mode [ 226.143470][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.151293][ T5802] Cannot create hsr debugfs directory [ 226.355720][ T5806] Bluetooth: hci0: command tx timeout [ 226.358568][ T5804] Bluetooth: hci1: command tx timeout [ 226.424376][ T5804] Bluetooth: hci4: command tx timeout [ 226.430030][ T5804] Bluetooth: hci2: command tx timeout [ 226.434295][ T5806] Bluetooth: hci3: command tx timeout [ 227.145347][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.231847][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.262206][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.297252][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.326338][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.430598][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.485728][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.506983][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.529115][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.554908][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.587018][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.686242][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.810976][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.856520][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.957573][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.988095][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.069715][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.136684][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.219992][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.271075][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.444430][ T5804] Bluetooth: hci0: command tx timeout [ 228.445326][ T5799] Bluetooth: hci1: command tx timeout [ 228.505102][ T5799] Bluetooth: hci2: command tx timeout [ 228.507486][ T5804] Bluetooth: hci3: command tx timeout [ 228.510670][ T5799] Bluetooth: hci4: command tx timeout [ 228.611552][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.785909][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.916368][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.972082][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.028464][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.036248][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.160996][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.181524][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.189261][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.205172][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.212818][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.347631][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.372063][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.379809][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.419236][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.426983][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.526615][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.599684][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.607442][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.674964][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.941317][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.971075][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.051100][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.058859][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.210184][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.241877][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.249634][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.379890][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.438285][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.446045][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.535411][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.651338][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.659099][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.794350][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.143766][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.207059][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.279564][ T5795] veth0_vlan: entered promiscuous mode [ 232.428445][ T5795] veth1_vlan: entered promiscuous mode [ 232.671281][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.775198][ T5794] veth0_vlan: entered promiscuous mode [ 232.812571][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.879728][ T5808] veth0_vlan: entered promiscuous mode [ 232.911312][ T5795] veth0_macvtap: entered promiscuous mode [ 232.962276][ T5794] veth1_vlan: entered promiscuous mode [ 232.981827][ T5795] veth1_macvtap: entered promiscuous mode [ 233.082231][ T5808] veth1_vlan: entered promiscuous mode [ 233.267872][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.358783][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.382926][ T5794] veth0_macvtap: entered promiscuous mode [ 233.445023][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.454351][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.463374][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.474799][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.512454][ T5794] veth1_macvtap: entered promiscuous mode [ 233.574885][ T5803] veth0_vlan: entered promiscuous mode [ 233.590456][ T5808] veth0_macvtap: entered promiscuous mode [ 233.671541][ T5808] veth1_macvtap: entered promiscuous mode [ 233.703133][ T5803] veth1_vlan: entered promiscuous mode [ 233.740712][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.752384][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.767174][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.923430][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.935935][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.947936][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.958753][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.973589][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.012059][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.024953][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.042183][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.102247][ T5803] veth0_macvtap: entered promiscuous mode [ 234.148612][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.159448][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.169736][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.180483][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.196546][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.223865][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.233086][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.243421][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.252615][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.278761][ T5803] veth1_macvtap: entered promiscuous mode [ 234.376591][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.386156][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.395423][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.404583][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.476318][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.488640][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.500399][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.511444][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.521642][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.532492][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.549468][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.771876][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.785600][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.797190][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.808490][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.818687][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.829491][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.844349][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.137520][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.151217][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.163869][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.173098][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.691060][ T5802] veth0_vlan: entered promiscuous mode [ 235.838776][ T5802] veth1_vlan: entered promiscuous mode [ 236.148037][ T5802] veth0_macvtap: entered promiscuous mode [ 236.253874][ T5802] veth1_macvtap: entered promiscuous mode [ 236.427297][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.438096][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.448332][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.460603][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.471202][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.482136][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.492246][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.503077][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.518123][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.653420][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.664524][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.674772][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.687611][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.697895][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.708704][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.718851][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.729722][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.744695][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.910595][ T5802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.919916][ T5802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.929154][ T5802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.938390][ T5802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.362327][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.371377][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.554710][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.562792][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.936844][ T5795] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.034155][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.044434][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.232835][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.241692][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.562466][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.570942][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.701415][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 241.877538][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.886772][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.361892][ T3677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.370073][ T3677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.539574][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.547897][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.720144][ T1554] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.868573][ T5991] can0: slcan on ptm0. [ 244.141320][ T5990] can0 (unregistered): slcan off ptm0. [ 244.644486][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.652814][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.021062][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.030210][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.760294][ T1554] usb 2-1: Using ep0 maxpacket: 32 [ 246.040813][ T1554] usb 2-1: device descriptor read/all, error -71 [ 247.365260][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 247.982887][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 248.012137][ T5854] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 248.022982][ T5854] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.037359][ T5854] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.046869][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.206130][ T5854] usbtmc 1-1:16.0: bulk endpoints not found [ 248.481504][ T5854] usb 1-1: USB disconnect, device number 2 [ 249.091063][ T5806] Bluetooth: hci0: Malformed HCI Event [ 249.175414][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 249.367982][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 249.399618][ T29] audit: type=1326 audit(1731996427.396:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f211857e759 code=0x0 [ 249.443851][ T5854] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 249.452783][ T5854] usb 2-1: config 0 has no interface number 0 [ 249.459318][ T5854] usb 2-1: config 0 interface 219 has no altsetting 0 [ 249.567102][ T5854] usb 2-1: New USB device found, idVendor=78e6, idProduct=2ca6, bcdDevice=85.f6 [ 249.576749][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.585456][ T5854] usb 2-1: Product: syz [ 249.589865][ T5854] usb 2-1: Manufacturer: syz [ 249.594829][ T5854] usb 2-1: SerialNumber: syz [ 249.687070][ T5854] usb 2-1: config 0 descriptor?? [ 249.953161][ T5854] usb 2-1: bad CDC descriptors [ 249.984730][ T1554] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 249.985366][ T5854] usb 2-1: USB disconnect, device number 4 [ 250.138682][ T5855] IPVS: starting estimator thread 0... [ 250.188396][ T1554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 250.199252][ T1554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 250.210318][ T1554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.221018][ T1554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 250.233271][ T1554] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 250.243268][ T1554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.277519][ T1554] usb 3-1: config 0 descriptor?? [ 250.284818][ T6063] IPVS: using max 240 ests per chain, 12000 per kthread [ 250.314717][ T6057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 250.642513][ T5854] usb 3-1: USB disconnect, device number 2 [ 251.438802][ T5806] Bluetooth: hci2: Malformed HCI Event [ 252.594343][ T1554] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 252.801191][ T1554] usb 1-1: Using ep0 maxpacket: 8 [ 252.869167][ T1554] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.879881][ T1554] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 252.892192][ T1554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 252.903562][ T1554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 252.913832][ T1554] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.107335][ T1554] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 253.116903][ T1554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 253.130177][ T1554] usb 1-1: Product: syz [ 253.136257][ T1554] usb 1-1: Manufacturer: syz [ 253.141103][ T1554] usb 1-1: SerialNumber: syz [ 253.166303][ T1554] usb 1-1: config 0 descriptor?? [ 253.307885][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 253.464567][ T1554] radio-si470x 1-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 253.686008][ T1554] radio-si470x 1-1:0.0: software version 100, hardware version 101 [ 253.786903][ T5806] Bluetooth: hci2: Malformed HCI Event [ 253.885414][ T1554] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 255.134996][ T5854] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 255.304986][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 255.331177][ T5854] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 255.339876][ T5854] usb 4-1: config 0 has no interface number 0 [ 255.410448][ T5854] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 255.420618][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.429038][ T5854] usb 4-1: Product: syz [ 255.433439][ T5854] usb 4-1: Manufacturer: syz [ 255.438370][ T5854] usb 4-1: SerialNumber: syz [ 255.498678][ T1554] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 255.541398][ T5854] usb 4-1: config 0 descriptor?? [ 255.554842][ T1554] usb 1-1: USB disconnect, device number 3 [ 255.609123][ T5854] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 256.134492][ T5854] gspca_topro: reg_w err -110 [ 256.165839][ T5854] gspca_topro: Sensor soi763a [ 256.280265][ T6143] program syz.2.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.716018][ T6163] binder: BINDER_SET_CONTEXT_MGR already set [ 257.722374][ T6163] binder: 6160:6163 ioctl 4018620d 20000040 returned -16 [ 257.874316][ T5854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 258.002441][ T5855] usb 4-1: USB disconnect, device number 2 [ 258.066320][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 258.276539][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.288166][ T5854] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 258.297701][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.464821][ T5854] usb 5-1: config 0 descriptor?? [ 258.935881][ T5854] kye 0003:0458:5013.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 259.018616][ T5854] kye 0003:0458:5013.0001: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 259.030049][ T5854] kye 0003:0458:5013.0001: tablet-enabling feature report not found [ 259.038547][ T5854] kye 0003:0458:5013.0001: tablet enabling failed [ 259.058730][ T6179] process 'syz.3.74' launched '/dev/fd/3' with NULL argv: empty string added [ 259.195749][ T5854] usb 5-1: USB disconnect, device number 2 [ 259.804908][ T1554] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.995316][ T1554] usb 3-1: Using ep0 maxpacket: 8 [ 260.023617][ T1554] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.052415][ T1554] usb 3-1: config 179 has no interface number 0 [ 260.067607][ T1554] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 260.079114][ T1554] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 260.096326][ T1554] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.112300][ T1554] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 260.129534][ T1554] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.143365][ T1554] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 260.152836][ T1554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.390226][ T6167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.475955][ T5854] usb 3-1: USB disconnect, device number 3 [ 261.476055][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.023888][ T6200] binder: BINDER_SET_CONTEXT_MGR already set [ 262.035438][ T6200] binder: 6199:6200 ioctl 4018620d 20000040 returned -16 [ 264.394361][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 264.770010][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 264.897078][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.911785][ T5854] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 264.922306][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.984674][ T29] audit: type=1326 audit(1731996442.966:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.95" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f876db7e759 code=0x0 [ 265.047237][ T5854] usb 1-1: config 0 descriptor?? [ 265.810227][ T5854] usbhid 1-1:0.0: can't add hid device: -71 [ 265.817070][ T5854] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 265.836827][ T5854] usb 1-1: USB disconnect, device number 4 [ 269.717870][ T29] audit: type=1326 audit(1731996447.706:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.1.108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f876db7e759 code=0x0 [ 270.724846][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 270.970026][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 271.037982][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.052688][ T5854] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 271.063488][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.307131][ T5854] usb 1-1: config 0 descriptor?? [ 271.565407][ T1554] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 271.734607][ T1554] usb 3-1: Using ep0 maxpacket: 32 [ 271.852046][ T1554] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 271.862001][ T1554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.877223][ T1554] usb 3-1: Product: syz [ 271.881643][ T1554] usb 3-1: Manufacturer: syz [ 271.886680][ T1554] usb 3-1: SerialNumber: syz [ 272.043752][ T1554] usb 3-1: config 0 descriptor?? [ 272.122087][ T1554] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 272.360553][ T5854] usbhid 1-1:0.0: can't add hid device: -71 [ 272.367378][ T5854] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 272.451184][ T5854] usb 1-1: USB disconnect, device number 5 [ 274.326947][ T5806] ===================================================== [ 274.334371][ T5806] BUG: KMSAN: uninit-value in hci_rx_work+0x10a8/0x1130 [ 274.341706][ T5806] hci_rx_work+0x10a8/0x1130 [ 274.346683][ T5806] process_scheduled_works+0xae0/0x1c40 [ 274.352454][ T5806] worker_thread+0xea7/0x14f0 [ 274.357516][ T5806] kthread+0x3e2/0x540 [ 274.361802][ T5806] ret_from_fork+0x6d/0x90 [ 274.366512][ T5806] ret_from_fork_asm+0x1a/0x30 [ 274.371538][ T5806] [ 274.374025][ T5806] Uninit was created at: [ 274.378554][ T5806] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 274.384786][ T5806] kmalloc_reserve+0x13d/0x4a0 [ 274.389798][ T5806] __alloc_skb+0x363/0x7b0 [ 274.394564][ T5806] vhci_write+0x127/0x900 [ 274.399127][ T5806] vfs_write+0xb2b/0x1540 [ 274.403652][ T5806] ksys_write+0x240/0x4b0 [ 274.408337][ T5806] __x64_sys_write+0x93/0xe0 [ 274.413128][ T5806] x64_sys_call+0x3161/0x3c30 [ 274.418260][ T5806] do_syscall_64+0xcd/0x1e0 [ 274.426667][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.432780][ T5806] [ 274.436389][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:5 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 274.447260][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 274.457631][ T5806] Workqueue: hci1 hci_rx_work [ 274.462522][ T5806] ===================================================== [ 274.469676][ T5806] Disabling lock debugging due to kernel taint [ 274.476085][ T5806] Kernel panic - not syncing: kmsan.panic set ... [ 274.482651][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:5 Tainted: G B 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 274.494877][ T5806] Tainted: [B]=BAD_PAGE [ 274.499146][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 274.509379][ T5806] Workqueue: hci1 hci_rx_work [ 274.514269][ T5806] Call Trace: [ 274.517677][ T5806] [ 274.520721][ T5806] dump_stack_lvl+0x216/0x2d0 [ 274.525634][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 274.531654][ T5806] dump_stack+0x1e/0x30 [ 274.536030][ T5806] panic+0x4e2/0xcf0 [ 274.540131][ T5806] ? kmsan_get_metadata+0x111/0x1c0 [ 274.545538][ T5806] kmsan_report+0x2c7/0x2d0 [ 274.550238][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.555641][ T5806] ? __msan_warning+0x95/0x120 [ 274.560648][ T5806] ? hci_rx_work+0x10a8/0x1130 [ 274.565602][ T5806] ? process_scheduled_works+0xae0/0x1c40 [ 274.571551][ T5806] ? worker_thread+0xea7/0x14f0 [ 274.576617][ T5806] ? kthread+0x3e2/0x540 [ 274.581085][ T5806] ? ret_from_fork+0x6d/0x90 [ 274.585866][ T5806] ? ret_from_fork_asm+0x1a/0x30 [ 274.591024][ T5806] ? filter_irq_stacks+0x60/0x1a0 [ 274.596291][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.601684][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.607080][ T5806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 274.613659][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.619055][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.624451][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.629843][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.635226][ T5806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 274.641806][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 274.647194][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 274.653193][ T5806] __msan_warning+0x95/0x120 [ 274.658016][ T5806] hci_rx_work+0x10a8/0x1130 [ 274.662814][ T5806] ? __pfx_hci_rx_work+0x10/0x10 [ 274.667932][ T5806] process_scheduled_works+0xae0/0x1c40 [ 274.673737][ T5806] worker_thread+0xea7/0x14f0 [ 274.678658][ T5806] kthread+0x3e2/0x540 [ 274.682956][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 274.688283][ T5806] ? __pfx_kthread+0x10/0x10 [ 274.693091][ T5806] ret_from_fork+0x6d/0x90 [ 274.697692][ T5806] ? __pfx_kthread+0x10/0x10 [ 274.702620][ T5806] ret_from_fork_asm+0x1a/0x30 [ 274.707620][ T5806] [ 274.710927][ T5806] Kernel Offset: disabled [ 274.715324][ T5806] Rebooting in 86400 seconds..