last executing test programs: 10.736744941s ago: executing program 2 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 9.721141262s ago: executing program 1 (id=36): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989", @ANYRES32=r0], 0x1000f) 9.64854778s ago: executing program 2 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 8.947952683s ago: executing program 2 (id=40): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 8.778460535s ago: executing program 1 (id=41): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={0x0, 0xfffe}, &(0x7f0000000480)=0x8) 8.612711893s ago: executing program 0 (id=43): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.0580314s ago: executing program 1 (id=45): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) close(0x4) 8.050852534s ago: executing program 2 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x207, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, @in={0x2, 0x4e20, @remote}], 0x48) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c9"], 0x0) 8.02620379s ago: executing program 3 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090000000000000000001c140091"], 0x1c}}, 0x0) 7.89206002s ago: executing program 0 (id=48): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x5b2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.161540275s ago: executing program 1 (id=50): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x20040005) 6.888745115s ago: executing program 3 (id=51): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x5, 0x7ffc0004}]}) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) 6.842855175s ago: executing program 0 (id=52): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) 5.815742846s ago: executing program 4 (id=53): socket$netlink(0x10, 0x3, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) removexattr(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x3, 0xffffffffffffffff, 0xfff, 0x80000}) 5.268508581s ago: executing program 1 (id=54): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1}, 0x7fffffff}], 0x2, 0x120, 0x0) 4.589592272s ago: executing program 3 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01cfb9894000000000251300000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90) 4.166042119s ago: executing program 2 (id=56): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000400)={0x0, 0xf, 0x4, "82049998"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.00053035s ago: executing program 4 (id=57): unshare(0x20060400) r0 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0xfffffffffffffff8, 0x0) 3.404862459s ago: executing program 3 (id=58): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x555555555555865, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x5, 0x2, 0x8001, 0x7, 0x8001}}]}) 3.311846748s ago: executing program 1 (id=59): r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0x5, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000100)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400981"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1) 3.207734655s ago: executing program 4 (id=60): r0 = syz_io_uring_setup(0x3707, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cd}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 2.31333511s ago: executing program 4 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 2.095715034s ago: executing program 3 (id=62): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x10, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0xa, 0x1002, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 1.789073911s ago: executing program 0 (id=63): bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x42b41c152a4389cb}], 0x30, 0x40000}, 0x0) 1.174794688s ago: executing program 4 (id=64): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$packet(0x11, 0x2, 0x300) setxattr$incfs_size(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=0x37dd, 0x8, 0x0) 961.990754ms ago: executing program 0 (id=65): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'freezer'}]}, 0x9) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20) 848.447987ms ago: executing program 3 (id=66): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x56555959, 0xfffffff7}}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 779.462799ms ago: executing program 2 (id=67): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x4, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0x0, 0x0}) 368.770939ms ago: executing program 4 (id=68): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x248b81, 0x0) 0s ago: executing program 0 (id=69): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 191.024718][ T5751] cgroup: Unknown subsys name 'net' [ 191.157043][ T5751] cgroup: Unknown subsys name 'cpuset' [ 191.177744][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.162986][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.888530][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.898407][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.910385][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.924857][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.947119][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.082808][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.092585][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.103270][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.118734][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.143807][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.157292][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.165483][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.179257][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.190647][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.232641][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.241008][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.256837][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.270588][ T5071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.290160][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.304192][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.413578][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.428436][ T5071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.439035][ T5071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.453894][ T5071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.466589][ T5071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.116979][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.123508][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.990685][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 205.046403][ T5783] Bluetooth: hci0: command tx timeout [ 205.229134][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 205.362489][ T5783] Bluetooth: hci1: command tx timeout [ 205.368570][ T5071] Bluetooth: hci3: command tx timeout [ 205.394635][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 205.439411][ T5783] Bluetooth: hci2: command tx timeout [ 205.516480][ T5783] Bluetooth: hci4: command tx timeout [ 205.736330][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 205.850771][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 206.296519][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.326821][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.334931][ T5770] bridge_slave_0: entered allmulticast mode [ 206.396658][ T5770] bridge_slave_0: entered promiscuous mode [ 206.481960][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.490241][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.498059][ T5770] bridge_slave_1: entered allmulticast mode [ 206.507553][ T5770] bridge_slave_1: entered promiscuous mode [ 206.905444][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.913660][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.922777][ T5785] bridge_slave_0: entered allmulticast mode [ 206.934593][ T5785] bridge_slave_0: entered promiscuous mode [ 206.959888][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.971287][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.979556][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.987214][ T5777] bridge_slave_0: entered allmulticast mode [ 206.995595][ T5777] bridge_slave_0: entered promiscuous mode [ 207.008314][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.018716][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.026632][ T5785] bridge_slave_1: entered allmulticast mode [ 207.035466][ T5785] bridge_slave_1: entered promiscuous mode [ 207.104931][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.116485][ T5783] Bluetooth: hci0: command tx timeout [ 207.147726][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.155292][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.163492][ T5777] bridge_slave_1: entered allmulticast mode [ 207.172263][ T5777] bridge_slave_1: entered promiscuous mode [ 207.209538][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.217315][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.224874][ T5775] bridge_slave_0: entered allmulticast mode [ 207.234506][ T5775] bridge_slave_0: entered promiscuous mode [ 207.355731][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.363902][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.371779][ T5775] bridge_slave_1: entered allmulticast mode [ 207.380782][ T5775] bridge_slave_1: entered promiscuous mode [ 207.417970][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.425610][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.433740][ T5774] bridge_slave_0: entered allmulticast mode [ 207.440297][ T5783] Bluetooth: hci1: command tx timeout [ 207.440589][ T5783] Bluetooth: hci3: command tx timeout [ 207.450823][ T5774] bridge_slave_0: entered promiscuous mode [ 207.499549][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.516526][ T5783] Bluetooth: hci2: command tx timeout [ 207.553103][ T5770] team0: Port device team_slave_0 added [ 207.559834][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.567837][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.575359][ T5774] bridge_slave_1: entered allmulticast mode [ 207.585288][ T5774] bridge_slave_1: entered promiscuous mode [ 207.596546][ T5783] Bluetooth: hci4: command tx timeout [ 207.607663][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.626093][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.670589][ T5770] team0: Port device team_slave_1 added [ 207.717231][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.767348][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.899817][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.949339][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.996251][ T5785] team0: Port device team_slave_0 added [ 208.033520][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.040878][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.067476][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.088467][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.105258][ T5777] team0: Port device team_slave_0 added [ 208.138988][ T5785] team0: Port device team_slave_1 added [ 208.173397][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.181357][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.208200][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.255257][ T5777] team0: Port device team_slave_1 added [ 208.298836][ T5775] team0: Port device team_slave_0 added [ 208.422254][ T5775] team0: Port device team_slave_1 added [ 208.441384][ T5774] team0: Port device team_slave_0 added [ 208.480735][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.488113][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.514877][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.565918][ T5774] team0: Port device team_slave_1 added [ 208.613468][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.620707][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.648796][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.663771][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.671142][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.698008][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.793305][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.801002][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.827560][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.862190][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.869567][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.896638][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.938964][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.946943][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.973936][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.015970][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.023978][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.050817][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.077928][ T5770] hsr_slave_0: entered promiscuous mode [ 209.087807][ T5770] hsr_slave_1: entered promiscuous mode [ 209.102659][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.110035][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.136895][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.196749][ T5783] Bluetooth: hci0: command tx timeout [ 209.432473][ T5777] hsr_slave_0: entered promiscuous mode [ 209.442278][ T5777] hsr_slave_1: entered promiscuous mode [ 209.451471][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 209.457406][ T5777] Cannot create hsr debugfs directory [ 209.503065][ T5785] hsr_slave_0: entered promiscuous mode [ 209.512778][ T5785] hsr_slave_1: entered promiscuous mode [ 209.518999][ T5783] Bluetooth: hci3: command tx timeout [ 209.526687][ T5783] Bluetooth: hci1: command tx timeout [ 209.527319][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 209.538214][ T5785] Cannot create hsr debugfs directory [ 209.596839][ T5783] Bluetooth: hci2: command tx timeout [ 209.666321][ T5775] hsr_slave_0: entered promiscuous mode [ 209.675322][ T5775] hsr_slave_1: entered promiscuous mode [ 209.681587][ T5783] Bluetooth: hci4: command tx timeout [ 209.689994][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 209.696019][ T5775] Cannot create hsr debugfs directory [ 209.767378][ T5774] hsr_slave_0: entered promiscuous mode [ 209.777073][ T5774] hsr_slave_1: entered promiscuous mode [ 209.785309][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 209.791368][ T5774] Cannot create hsr debugfs directory [ 211.181526][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.226065][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.249538][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.276943][ T5783] Bluetooth: hci0: command tx timeout [ 211.287860][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.411647][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.454582][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.479622][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.515094][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.597539][ T5071] Bluetooth: hci3: command tx timeout [ 211.604880][ T5783] Bluetooth: hci1: command tx timeout [ 211.676674][ T5783] Bluetooth: hci2: command tx timeout [ 211.756751][ T5783] Bluetooth: hci4: command tx timeout [ 211.786757][ T5775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.831094][ T5775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.883177][ T5775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.908735][ T5775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.202453][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.268607][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.317433][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.341425][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.613932][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.800041][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.829203][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.888071][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.944297][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.030684][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.094236][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.161672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.169180][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.284630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.292245][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.422474][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.505769][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.513409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.591886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.599547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.684004][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.982322][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.025998][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.181634][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.189381][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.361623][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.369157][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.452273][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.645264][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.704879][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.712582][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.963742][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.971665][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.243753][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.380871][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.388577][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.491128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.498886][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.649400][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.834732][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.462056][ T5770] veth0_vlan: entered promiscuous mode [ 216.580964][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.745272][ T5770] veth1_vlan: entered promiscuous mode [ 216.783500][ T5777] veth0_vlan: entered promiscuous mode [ 217.008581][ T5777] veth1_vlan: entered promiscuous mode [ 217.256033][ T5770] veth0_macvtap: entered promiscuous mode [ 217.371041][ T5770] veth1_macvtap: entered promiscuous mode [ 217.429649][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.624872][ T5777] veth0_macvtap: entered promiscuous mode [ 217.763157][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.783224][ T5777] veth1_macvtap: entered promiscuous mode [ 217.884724][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.977683][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.054577][ T1032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.064461][ T1032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.109015][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.123504][ T1032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.133963][ T1032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.201502][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.348171][ T130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.360113][ T130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.415505][ T130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.436971][ T130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.490885][ T5785] veth0_vlan: entered promiscuous mode [ 218.695655][ T5785] veth1_vlan: entered promiscuous mode [ 219.019828][ T5775] veth0_vlan: entered promiscuous mode [ 219.075809][ T5774] veth0_vlan: entered promiscuous mode [ 219.199568][ T5775] veth1_vlan: entered promiscuous mode [ 219.264131][ T5774] veth1_vlan: entered promiscuous mode [ 219.324583][ T5785] veth0_macvtap: entered promiscuous mode [ 219.459136][ T5785] veth1_macvtap: entered promiscuous mode [ 219.692457][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.872090][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.970650][ T5775] veth0_macvtap: entered promiscuous mode [ 220.063120][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.084072][ T130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.128579][ T5774] veth0_macvtap: entered promiscuous mode [ 220.172701][ T130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.192024][ T5775] veth1_macvtap: entered promiscuous mode [ 220.269882][ T130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.300042][ T5774] veth1_macvtap: entered promiscuous mode [ 220.684807][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.731734][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.822945][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.912153][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.070503][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.116483][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.125926][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.187717][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.251914][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.271072][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.332882][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.366585][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.988922][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.046797][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.376665][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.384807][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.909119][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.931719][ T5770] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 224.958859][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.373041][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.409780][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.762376][ T5965] binder_alloc: 5963: binder_alloc_buf, no vma [ 232.026477][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.034631][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.464908][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.536998][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.496797][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.504821][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.821033][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.850765][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.892733][ T5985] process 'syz.1.11' launched '/dev/fd/8' with NULL argv: empty string added [ 234.096993][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.126745][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.146459][ T5834] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 234.392685][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.420015][ T5834] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 234.460419][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.520999][ T5834] usb 4-1: config 0 descriptor?? [ 234.530274][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.607759][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.284702][ T5834] ath6kl: Failed to read usb control message: -71 [ 235.328550][ T5834] ath6kl: Unable to read the bmi data from the device: -71 [ 235.336012][ T5834] ath6kl: Unable to recv target info: -71 [ 235.374624][ T5834] ath6kl: Failed to init ath6kl core: -71 [ 235.477572][ T5834] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 235.569016][ T5834] usb 4-1: USB disconnect, device number 2 [ 235.831880][ T6005] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 236.426938][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 236.620983][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 236.662144][ T5834] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 236.681097][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.753714][ T5834] usb 1-1: config 0 has no interface number 0 [ 236.778949][ T5834] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 236.825250][ T5834] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 236.852315][ T5834] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 236.865325][ T5834] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 236.902895][ T5834] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 236.914748][ T5834] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 236.944885][ T5834] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 236.965443][ T5834] usb 1-1: config 0 interface 239 has no altsetting 0 [ 236.994065][ T5834] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 237.006962][ T794] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 237.019857][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.043849][ T5834] usb 1-1: Product: syz [ 237.076569][ T5834] usb 1-1: Manufacturer: syz [ 237.092523][ T5834] usb 1-1: SerialNumber: syz [ 237.163375][ T5834] usb 1-1: config 0 descriptor?? [ 237.185141][ T6009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.198084][ T6009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.223438][ T794] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.234370][ T794] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 237.263294][ T794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.289294][ T794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 237.304387][ T794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 237.376045][ T794] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.407309][ T794] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.418697][ T794] usb 2-1: Product: syz [ 237.423197][ T794] usb 2-1: Manufacturer: syz [ 237.484931][ T794] cdc_wdm 2-1:1.0: skipping garbage [ 237.526937][ T794] cdc_wdm 2-1:1.0: skipping garbage [ 237.616971][ T794] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 237.687130][ T794] cdc_wdm 2-1:1.0: Unknown control protocol [ 237.705635][ T5827] usb 1-1: USB disconnect, device number 2 [ 240.875327][ T5827] usb 2-1: USB disconnect, device number 2 [ 241.906591][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.181071][ T5834] usb 2-1: config 6 has an invalid interface number: 134 but max is 2 [ 242.232255][ T5834] usb 2-1: config 6 has an invalid interface number: 17 but max is 2 [ 242.301339][ T5834] usb 2-1: config 6 has an invalid interface number: 65 but max is 2 [ 242.370451][ T5834] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 242.434110][ T5834] usb 2-1: config 6 has no interface number 0 [ 242.470818][ T5834] usb 2-1: config 6 has no interface number 1 [ 243.078024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.180505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.386505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.487728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.509011][ T5834] usb 2-1: config 6 has no interface number 2 [ 243.515379][ T5834] usb 2-1: config 6 interface 134 altsetting 6 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 243.563733][ T5834] usb 2-1: config 6 interface 134 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 243.896915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.999498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 244.409075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 244.476868][ T5834] usb 2-1: config 6 interface 134 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 244.506378][ T5834] usb 2-1: config 6 interface 134 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 244.680089][ T5834] usb 2-1: config 6 interface 17 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 244.745060][ T5834] usb 2-1: config 6 interface 17 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.809204][ T5834] usb 2-1: config 6 interface 17 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 244.873591][ T5834] usb 2-1: config 6 interface 17 altsetting 7 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 244.949569][ T5834] usb 2-1: config 6 interface 17 altsetting 7 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 244.987499][ T5834] usb 2-1: config 6 interface 65 altsetting 174 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 245.092565][ T5834] usb 2-1: config 6 interface 134 has no altsetting 0 [ 245.120914][ T5834] usb 2-1: config 6 interface 17 has no altsetting 0 [ 245.171665][ T5834] usb 2-1: config 6 interface 65 has no altsetting 0 [ 246.053754][ T5834] usb 2-1: string descriptor 0 read error: -71 [ 248.849084][ T5834] usb 2-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=ae.e4 [ 248.989750][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.347884][ T5834] usb 2-1: can't set config #6, error -71 [ 249.486941][ T5834] usb 2-1: USB disconnect, device number 3 [ 253.895140][ T29] audit: type=1326 audit(1774689554.873:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 253.965071][ T5827] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.288423][ T5827] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.298731][ T29] audit: type=1326 audit(1774689554.923:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 254.576609][ T29] audit: type=1326 audit(1774689554.923:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 254.860884][ T29] audit: type=1326 audit(1774689555.023:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 255.115617][ T29] audit: type=1326 audit(1774689555.033:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 255.424878][ T29] audit: type=1326 audit(1774689555.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 255.550485][ T29] audit: type=1326 audit(1774689555.083:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 255.626462][ T29] audit: type=1326 audit(1774689555.083:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 255.763519][ T29] audit: type=1326 audit(1774689555.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 255.936466][ T29] audit: type=1326 audit(1774689555.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb50a19c799 code=0x7ffc0000 [ 256.293820][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 256.515592][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 256.646742][ T5834] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 256.666888][ T5834] usb 3-1: config 0 has no interface number 0 [ 256.692349][ T5834] usb 3-1: config 0 interface 184 has no altsetting 0 [ 256.788955][ T5834] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 256.840445][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.855217][ T6122] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 256.878957][ T5834] usb 3-1: Product: syz [ 256.888263][ T5834] usb 3-1: Manufacturer: syz [ 256.918459][ T5834] usb 3-1: SerialNumber: syz [ 256.983497][ T5834] usb 3-1: config 0 descriptor?? [ 257.405696][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 257.592862][ T6120] fido_id[6120]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 257.624168][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.681778][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.694120][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 257.746387][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.755965][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 257.787533][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.805089][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.873804][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.966988][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.975662][ T9] usb 2-1: Product: syz [ 258.007063][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 258.056500][ T9] usb 2-1: Manufacturer: syz [ 258.063708][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 258.113934][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 258.136385][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.151969][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 258.190442][ T5834] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.201847][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 258.237141][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 258.316663][ T5834] usb 3-1: USB disconnect, device number 2 [ 259.107824][ T5827] usb 2-1: USB disconnect, device number 4 [ 259.939582][ T6145] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 260.116449][ T6145] ===================================================== [ 260.124010][ T6145] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 260.132356][ T6145] dvbdmx_release_ts_feed+0x198/0x290 [ 260.138281][ T6145] dvb_dmxdev_add_pid+0xacc/0xb50 [ 260.143640][ T6145] dvb_demux_do_ioctl+0x78b/0xc80 [ 260.149119][ T6145] dvb_usercopy+0x263/0x500 [ 260.153806][ T6145] dvb_demux_ioctl+0x46/0x70 [ 260.160942][ T6145] __se_sys_ioctl+0x23c/0x400 [ 260.166523][ T6145] __x64_sys_ioctl+0x97/0xe0 [ 260.171941][ T6145] x64_sys_call+0x1975/0x3ea0 [ 260.181124][ T6145] do_syscall_64+0x134/0xf80 [ 260.185953][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.194065][ T6145] [ 260.203354][ T6145] Uninit was created at: [ 260.208179][ T6145] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 260.214302][ T6145] alloc_pages_mpol+0x328/0x860 [ 260.221082][ T6145] alloc_pages_noprof+0x101/0x280 [ 260.226618][ T6145] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 260.232749][ T6145] __vmalloc_noprof+0x128/0x1f0 [ 260.238027][ T6145] vmalloc_array_noprof+0x48/0x80 [ 260.243393][ T6145] dvb_dmx_init+0x121/0x930 [ 260.248291][ T6145] vidtv_bridge_probe+0x1b1f/0x2690 [ 260.253734][ T6145] platform_probe+0x213/0x370 [ 260.258845][ T6145] really_probe+0x4d5/0xe40 [ 260.263618][ T6145] __driver_probe_device+0x25e/0x370 [ 260.269373][ T6145] driver_probe_device+0x70/0x8f0 [ 260.274675][ T6145] __driver_attach+0x541/0xaa0 [ 260.284261][ T6145] bus_for_each_dev+0x33b/0x580 [ 260.291057][ T6145] driver_attach+0x51/0x70 [ 260.295655][ T6145] bus_add_driver+0x54f/0xdb0 [ 260.300753][ T6145] driver_register+0x42e/0x6a0 [ 260.305719][ T6145] __platform_driver_register+0x65/0x80 [ 260.311794][ T6145] vidtv_bridge_init+0x73/0x100 [ 260.317084][ T6145] do_one_initcall+0x237/0xbb0 [ 260.322072][ T6145] do_initcall_level+0x157/0x350 [ 260.327378][ T6145] do_initcalls+0x176/0x310 [ 260.332082][ T6145] do_basic_setup+0x1d/0x30 [ 260.337061][ T6145] kernel_init_freeable+0x213/0x460 [ 260.342468][ T6145] kernel_init+0x2f/0x5e0 [ 260.347219][ T6145] ret_from_fork+0x20f/0x910 [ 260.352193][ T6145] ret_from_fork_asm+0x1a/0x30 [ 260.357389][ T6145] [ 260.359830][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) [ 260.369477][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.384923][ T6145] ===================================================== [ 260.393631][ T6145] Disabling lock debugging due to kernel taint [ 260.639100][ T6155] can0: slcan on ttyS3. [ 263.283563][ T6145] Kernel panic - not syncing: kmsan.panic set ... [ 263.290182][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.2.67 Tainted: G B syzkaller #0 PREEMPT(full) [ 263.301106][ T6145] Tainted: [B]=BAD_PAGE [ 263.305376][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.315572][ T6145] Call Trace: [ 263.318985][ T6145] [ 263.322046][ T6145] __dump_stack+0x26/0x30 [ 263.326603][ T6145] dump_stack_lvl+0x50/0x1c0 [ 263.331425][ T6145] ? dump_stack+0x12/0x25 [ 263.335970][ T6145] dump_stack+0x1e/0x25 [ 263.340342][ T6145] vpanic+0x7b4/0x1430 [ 263.344750][ T6145] panic+0x15d/0x160 [ 263.348917][ T6145] kmsan_report+0x31a/0x320 [ 263.353699][ T6145] ? vprintk_emit+0xb60/0xba0 [ 263.358620][ T6145] ? __msan_warning+0x1b/0x30 [ 263.363531][ T6145] ? dvbdmx_release_ts_feed+0x198/0x290 [ 263.369260][ T6145] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 263.374604][ T6145] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 263.380055][ T6145] ? dvb_usercopy+0x263/0x500 [ 263.384853][ T6145] ? dvb_demux_ioctl+0x46/0x70 [ 263.389819][ T6145] ? __se_sys_ioctl+0x23c/0x400 [ 263.394831][ T6145] ? __x64_sys_ioctl+0x97/0xe0 [ 263.399766][ T6145] ? x64_sys_call+0x1975/0x3ea0 [ 263.404799][ T6145] ? do_syscall_64+0x134/0xf80 [ 263.409792][ T6145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.415982][ T6145] ? irqentry_exit+0x8f/0x6c0 [ 263.420836][ T6145] ? kmsan_get_metadata+0xf1/0x160 [ 263.426159][ T6145] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 263.432872][ T6145] ? kmsan_get_metadata+0xf1/0x160 [ 263.438250][ T6145] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.444338][ T6145] ? preempt_schedule_common+0x5b/0x80 [ 263.450008][ T6145] ? preempt_schedule+0x30/0x40 [ 263.454996][ T6145] ? preempt_schedule_thunk+0x16/0x30 [ 263.460559][ T6145] ? _raw_spin_unlock_irq+0x47/0x50 [ 263.465883][ T6145] ? kmsan_get_metadata+0x146/0x160 [ 263.471259][ T6145] __msan_warning+0x1b/0x30 [ 263.475965][ T6145] dvbdmx_release_ts_feed+0x198/0x290 [ 263.481589][ T6145] dvb_dmxdev_add_pid+0xacc/0xb50 [ 263.486871][ T6145] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 263.493012][ T6145] dvb_demux_do_ioctl+0x78b/0xc80 [ 263.498207][ T6145] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 263.503978][ T6145] dvb_usercopy+0x263/0x500 [ 263.508610][ T6145] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 263.514313][ T6145] ? kmsan_get_metadata+0xf1/0x160 [ 263.519586][ T6145] dvb_demux_ioctl+0x46/0x70 [ 263.524290][ T6145] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 263.529696][ T6145] __se_sys_ioctl+0x23c/0x400 [ 263.534610][ T6145] __x64_sys_ioctl+0x97/0xe0 [ 263.539351][ T6145] x64_sys_call+0x1975/0x3ea0 [ 263.544166][ T6145] do_syscall_64+0x134/0xf80 [ 263.548986][ T6145] ? clear_bhb_loop+0x50/0xa0 [ 263.553824][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.560016][ T6145] RIP: 0033:0x7f26fdd9c799 [ 263.564699][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.584509][ T6145] RSP: 002b:00007f26fec67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.593062][ T6145] RAX: ffffffffffffffda RBX: 00007f26fe015fa0 RCX: 00007f26fdd9c799 [ 263.601138][ T6145] RDX: 0000200000000100 RSI: 0000000040026f33 RDI: 0000000000000004 [ 263.609200][ T6145] RBP: 00007f26fde32c99 R08: 0000000000000000 R09: 0000000000000000 [ 263.617255][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.625391][ T6145] R13: 00007f26fe016038 R14: 00007f26fe015fa0 R15: 00007ffeb0f20d88 [ 263.633486][ T6145] [ 263.636745][ T6145] Kernel Offset: disabled [ 263.641324][ T6145] Rebooting in 86400 seconds..