last executing test programs: 2m33.933772519s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)={0x60, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8015}, 0x44084) 2m32.401836118s ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa608}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0xffe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x1000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x78}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) 2m31.505218736s ago: executing program 2 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x139}}, './file1\x00'}) openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 2m18.110579988s ago: executing program 1 (id=22): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m16.048184642s ago: executing program 32 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x139}}, './file1\x00'}) openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 2m15.859953688s ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xa, 0x0, 0x4, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 2m14.39899687s ago: executing program 1 (id=30): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0xc040222) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 2m13.28777519s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @void}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, &(0x7f0000002380)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) 2m11.855767723s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x0, 0x7, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "84653375"}, 0x0, 0x2, {0x0}}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000040)={0xa, @sliced={0x1, [0x4, 0x5, 0x7, 0xc, 0x26, 0x1, 0x4, 0x2, 0xc46d, 0x6, 0x200, 0x4, 0xe5, 0x80, 0xa104, 0x400, 0x6e, 0xea, 0x400, 0xd, 0x8, 0x7f, 0x3, 0x7ff, 0x0, 0x3ff, 0x77, 0x3, 0xfe34, 0x9b1a, 0x0, 0x4c4d, 0x7, 0x4000, 0x85, 0x5, 0x1, 0x3ff, 0x0, 0x5da4, 0x4, 0x7f, 0xffff, 0x8, 0x9, 0x8, 0x4, 0x81], 0x4}}) syz_clone3(&(0x7f0000000580)={0x200800400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup(0x178e, 0x0) 2m9.331796655s ago: executing program 1 (id=35): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x67, 0xf9, 0x78, 0x40, 0x2639, 0x3, 0xfd62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0xb2, 0xfa, 0x4e}}]}}]}}, 0x0) 1m53.679915557s ago: executing program 33 (id=35): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x67, 0xf9, 0x78, 0x40, 0x2639, 0x3, 0xfd62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0xb2, 0xfa, 0x4e}}]}}]}}, 0x0) 14.068922655s ago: executing program 3 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)={@val={0x4}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0xffe}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}}, 0x86) 12.591447215s ago: executing program 3 (id=318): write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) 12.524237841s ago: executing program 6 (id=319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0x200000000000004a, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) 12.089883984s ago: executing program 4 (id=320): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 11.903895976s ago: executing program 3 (id=321): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.567820943s ago: executing program 6 (id=324): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) symlink(0x0, &(0x7f0000000340)='./file1\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') socket$netlink(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={0x0, 0x2, 0xc46b285, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) 10.957966833s ago: executing program 5 (id=325): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) capset(&(0x7f0000000280)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000300)={0x2, 0x6, 0x6, 0x7, 0xff, 0x7}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) setreuid(0xffffffffffffffff, 0xee00) keyctl$setperm(0x5, 0x0, 0x220c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x38, 0x0, 0x0) 10.811236692s ago: executing program 0 (id=326): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.286357965s ago: executing program 4 (id=327): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe610f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee07000000000000003a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) 7.963797524s ago: executing program 5 (id=328): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04130511c8"], 0x8) 7.660740567s ago: executing program 6 (id=329): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 7.539357479s ago: executing program 3 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) 7.41591926s ago: executing program 0 (id=331): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x1, {0x1, 0x1}}, 0x5) 6.948129687s ago: executing program 5 (id=332): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$dsp(r0, &(0x7f0000000040)="9c28f8f1a56a7e72c57d9da36ed4c040", 0x10) 6.54756562s ago: executing program 4 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x2, 0x2, 0x4, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 6.267673789s ago: executing program 3 (id=334): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000ff0700"], 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabfee"], 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.119023229s ago: executing program 6 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.858378247s ago: executing program 0 (id=336): socket(0x2000000015, 0x80005, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r1, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000480)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=[{{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{r2, r5, 0x3}, {r4, r6}}) 5.392018258s ago: executing program 4 (id=337): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="6112bf00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff070067"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) 5.314740877s ago: executing program 5 (id=338): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) capset(&(0x7f0000000280)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000300)={0x2, 0x6, 0x6, 0x7, 0xff, 0x7}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) setreuid(0xffffffffffffffff, 0xee00) keyctl$setperm(0x5, 0x0, 0x220c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x38, 0x0, 0x0) 4.7002594s ago: executing program 0 (id=339): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f0000", @ANYRES8=0x0, @ANYRESDEC], 0xa0}}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) symlink(0x0, &(0x7f0000000340)='./file1\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') socket$netlink(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={0x0, 0x2, 0xc46b285, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) 4.397370702s ago: executing program 3 (id=340): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.907963247s ago: executing program 4 (id=341): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2.518439843s ago: executing program 5 (id=342): r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x42c01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) 1.695133814s ago: executing program 0 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x601, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 1.163993326s ago: executing program 6 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) 749.555025ms ago: executing program 0 (id=345): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 540.13204ms ago: executing program 4 (id=346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './cgroup'}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 359.729339ms ago: executing program 5 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x2, 0x2, 0x4, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 0s ago: executing program 6 (id=348): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) write$dsp(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 195.425817][ T5776] cgroup: Unknown subsys name 'net' [ 195.559439][ T5776] cgroup: Unknown subsys name 'cpuset' [ 195.575119][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.706270][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.713258][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.530071][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 252.732421][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.741517][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.758865][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.767082][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.776822][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.785960][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.798590][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.809481][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.816787][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.827230][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.851155][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.861325][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.889320][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.902817][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.914457][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.918687][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.948784][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.957233][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.967164][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.980188][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.980773][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.002778][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.034302][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.048395][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.090358][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.295034][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 254.679361][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 254.846470][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 254.894917][ T5801] Bluetooth: hci1: command tx timeout [ 254.902741][ T5801] Bluetooth: hci0: command tx timeout [ 254.970780][ T5801] Bluetooth: hci2: command tx timeout [ 255.129457][ T5801] Bluetooth: hci4: command tx timeout [ 255.207884][ T5801] Bluetooth: hci3: command tx timeout [ 255.220630][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 255.431758][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.443004][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.451024][ T5800] bridge_slave_0: entered allmulticast mode [ 255.460875][ T5800] bridge_slave_0: entered promiscuous mode [ 255.520599][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.528819][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.536580][ T5800] bridge_slave_1: entered allmulticast mode [ 255.546548][ T5800] bridge_slave_1: entered promiscuous mode [ 255.688908][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 255.725158][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.800820][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.123106][ T5800] team0: Port device team_slave_0 added [ 256.226089][ T5800] team0: Port device team_slave_1 added [ 256.235550][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.243513][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.253607][ T5811] bridge_slave_0: entered allmulticast mode [ 256.263603][ T5811] bridge_slave_0: entered promiscuous mode [ 256.281205][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.289205][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.296943][ T5799] bridge_slave_0: entered allmulticast mode [ 256.307062][ T5799] bridge_slave_0: entered promiscuous mode [ 256.390282][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.400477][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.409354][ T5811] bridge_slave_1: entered allmulticast mode [ 256.419085][ T5811] bridge_slave_1: entered promiscuous mode [ 256.431677][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.439475][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.447217][ T5799] bridge_slave_1: entered allmulticast mode [ 256.457686][ T5799] bridge_slave_1: entered promiscuous mode [ 256.845107][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.853628][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.881277][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.906191][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.930163][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.940174][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.948086][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.955812][ T5805] bridge_slave_0: entered allmulticast mode [ 256.965037][ T5805] bridge_slave_0: entered promiscuous mode [ 256.967929][ T5801] Bluetooth: hci0: command tx timeout [ 256.976686][ T5801] Bluetooth: hci1: command tx timeout [ 257.021861][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.030331][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.056831][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.069842][ T5801] Bluetooth: hci2: command tx timeout [ 257.082690][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.119727][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.167080][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.174789][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.182650][ T5805] bridge_slave_1: entered allmulticast mode [ 257.191371][ T5805] bridge_slave_1: entered promiscuous mode [ 257.207805][ T5801] Bluetooth: hci4: command tx timeout [ 257.247098][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.254951][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.263188][ T5809] bridge_slave_0: entered allmulticast mode [ 257.273044][ T5809] bridge_slave_0: entered promiscuous mode [ 257.287973][ T5801] Bluetooth: hci3: command tx timeout [ 257.435006][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.442748][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.451169][ T5809] bridge_slave_1: entered allmulticast mode [ 257.460831][ T5809] bridge_slave_1: entered promiscuous mode [ 257.558867][ T5811] team0: Port device team_slave_0 added [ 257.574496][ T5799] team0: Port device team_slave_0 added [ 257.594107][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.611746][ T5799] team0: Port device team_slave_1 added [ 257.699623][ T5811] team0: Port device team_slave_1 added [ 257.719108][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.843559][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.865389][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.948195][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.955391][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.982145][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.011092][ T5800] hsr_slave_0: entered promiscuous mode [ 258.021411][ T5800] hsr_slave_1: entered promiscuous mode [ 258.033569][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.042067][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.068801][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.153334][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.160649][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.187062][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.306565][ T5809] team0: Port device team_slave_0 added [ 258.316420][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.323791][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.350459][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.388547][ T5805] team0: Port device team_slave_0 added [ 258.410797][ T5809] team0: Port device team_slave_1 added [ 258.507134][ T5805] team0: Port device team_slave_1 added [ 258.669320][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.676530][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.703169][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.804477][ T5799] hsr_slave_0: entered promiscuous mode [ 258.814811][ T5799] hsr_slave_1: entered promiscuous mode [ 258.824107][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.832008][ T5799] Cannot create hsr debugfs directory [ 258.899300][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.906522][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.934096][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.949561][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.956773][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.983379][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.047609][ T5801] Bluetooth: hci0: command tx timeout [ 259.053398][ T5801] Bluetooth: hci1: command tx timeout [ 259.070626][ T5811] hsr_slave_0: entered promiscuous mode [ 259.080919][ T5811] hsr_slave_1: entered promiscuous mode [ 259.089709][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.097617][ T5811] Cannot create hsr debugfs directory [ 259.106333][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.115192][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.141676][ T5806] Bluetooth: hci2: command tx timeout [ 259.148559][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.313976][ T5806] Bluetooth: hci4: command tx timeout [ 259.367694][ T5806] Bluetooth: hci3: command tx timeout [ 259.598961][ T5809] hsr_slave_0: entered promiscuous mode [ 259.609493][ T5809] hsr_slave_1: entered promiscuous mode [ 259.619552][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.627475][ T5809] Cannot create hsr debugfs directory [ 259.851832][ T5805] hsr_slave_0: entered promiscuous mode [ 259.862112][ T5805] hsr_slave_1: entered promiscuous mode [ 259.871078][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.879109][ T5805] Cannot create hsr debugfs directory [ 260.659495][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.744637][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.833187][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.866578][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.128475][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.137757][ T5806] Bluetooth: hci1: command tx timeout [ 261.143457][ T5801] Bluetooth: hci0: command tx timeout [ 261.159977][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.180638][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.207796][ T5801] Bluetooth: hci2: command tx timeout [ 261.221291][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.369072][ T5801] Bluetooth: hci4: command tx timeout [ 261.456949][ T5801] Bluetooth: hci3: command tx timeout [ 261.461224][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.519555][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.543363][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.592811][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.616132][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.650428][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.711362][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.748322][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.941731][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.980462][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.014128][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.041253][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.703986][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.855248][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.871360][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.009597][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.078677][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.086479][ T3884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.102982][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.110838][ T3884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.163942][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.198891][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.206561][ T3884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.308971][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.316604][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.365087][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.449572][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.654692][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.675437][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.683152][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.745424][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.753151][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.792949][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.839901][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.847737][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.988532][ T5799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.000534][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.058957][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.068492][ T4069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.190797][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.421427][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.429210][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.445349][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.453093][ T4069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.503441][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.514392][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.004250][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.271623][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.692635][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.857129][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.898060][ T5799] veth0_vlan: entered promiscuous mode [ 266.996083][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.041331][ T5799] veth1_vlan: entered promiscuous mode [ 267.447257][ T5809] veth0_vlan: entered promiscuous mode [ 267.496309][ T5799] veth0_macvtap: entered promiscuous mode [ 267.553769][ T5809] veth1_vlan: entered promiscuous mode [ 267.569341][ T5811] veth0_vlan: entered promiscuous mode [ 267.615769][ T5799] veth1_macvtap: entered promiscuous mode [ 267.715134][ T5805] veth0_vlan: entered promiscuous mode [ 267.792731][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.805200][ T5811] veth1_vlan: entered promiscuous mode [ 267.922161][ T5805] veth1_vlan: entered promiscuous mode [ 267.949923][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.964247][ T5809] veth0_macvtap: entered promiscuous mode [ 268.069108][ T5809] veth1_macvtap: entered promiscuous mode [ 268.108362][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.117668][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.126710][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.137914][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.342391][ T5811] veth0_macvtap: entered promiscuous mode [ 268.415584][ T5811] veth1_macvtap: entered promiscuous mode [ 268.435729][ T5805] veth0_macvtap: entered promiscuous mode [ 268.457935][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.514551][ T5805] veth1_macvtap: entered promiscuous mode [ 268.548554][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.654379][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.685753][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.695073][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.704390][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.713769][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.805337][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.887824][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.944323][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.953672][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.964783][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.974036][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.998952][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.099674][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.108970][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.118352][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.128574][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.245213][ T5800] veth0_vlan: entered promiscuous mode [ 269.402710][ T5800] veth1_vlan: entered promiscuous mode [ 269.707042][ T5800] veth0_macvtap: entered promiscuous mode [ 269.809761][ T5800] veth1_macvtap: entered promiscuous mode [ 270.083252][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.184827][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.272048][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.281235][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.290496][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.299720][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.332835][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.341227][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.576470][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.586014][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.699383][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.708164][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.857248][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.865629][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.050397][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.058809][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.266332][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 276.334864][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.334950][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.444662][ T4069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.452855][ T4069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.545572][ T3884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.554199][ T3884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.957551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 278.007032][ T4069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.015780][ T4069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.108537][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 278.591252][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.599541][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.608231][ T5858] usb 2-1: device descriptor read/64, error -71 [ 278.882038][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 279.088095][ T5858] usb 2-1: device descriptor read/64, error -71 [ 279.209875][ T5858] usb usb2-port1: attempt power cycle [ 279.585870][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 279.635241][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 279.725891][ T5858] usb 2-1: device descriptor read/8, error -71 [ 280.108202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.210405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 280.250775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 280.459034][ T5858] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 280.509123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 280.904246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 281.123495][ T5858] usb 2-1: device descriptor read/8, error -71 [ 281.133824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 281.268611][ T5858] usb usb2-port1: unable to enumerate USB device [ 283.489255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 283.501891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 283.512697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.622844][ T4069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.868016][ T4069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.402738][ T4069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.619556][ T4069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.003960][ T4069] bridge_slave_1: left allmulticast mode [ 290.010844][ T4069] bridge_slave_1: left promiscuous mode [ 290.017909][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.082436][ T4069] bridge_slave_0: left allmulticast mode [ 290.088868][ T4069] bridge_slave_0: left promiscuous mode [ 290.095571][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.004386][ T4069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.049165][ T4069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.079900][ T4069] bond0 (unregistering): Released all slaves [ 291.180688][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.187887][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.785432][ T4069] hsr_slave_0: left promiscuous mode [ 291.807509][ T4069] hsr_slave_1: left promiscuous mode [ 291.815733][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.824177][ T4069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.860300][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.868130][ T4069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.949375][ T4069] veth1_macvtap: left promiscuous mode [ 291.955117][ T4069] veth0_macvtap: left promiscuous mode [ 291.961082][ T4069] veth1_vlan: left promiscuous mode [ 291.966545][ T4069] veth0_vlan: left promiscuous mode [ 293.089961][ T4069] team0 (unregistering): Port device team_slave_1 removed [ 293.143546][ T4069] team0 (unregistering): Port device team_slave_0 removed [ 293.989080][ T6064] netlink: 'syz.4.23': attribute type 6 has an invalid length. [ 295.300112][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.330548][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.341368][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.378771][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.394598][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.236723][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.248640][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.272859][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.327782][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.350223][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.531780][ T5803] Bluetooth: hci0: command tx timeout [ 298.408233][ T5803] Bluetooth: hci5: command tx timeout [ 298.730137][ T6080] chnl_net:caif_netlink_parms(): no params data found [ 299.321995][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 299.618450][ T5803] Bluetooth: hci0: command tx timeout [ 300.490125][ T5803] Bluetooth: hci5: command tx timeout [ 301.727774][ T5803] Bluetooth: hci0: command tx timeout [ 302.608766][ T5803] Bluetooth: hci5: command tx timeout [ 304.168149][ T5803] Bluetooth: hci0: command tx timeout [ 304.600411][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.608184][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.616161][ T6080] bridge_slave_0: entered allmulticast mode [ 304.626211][ T6080] bridge_slave_0: entered promiscuous mode [ 304.656036][ T5803] Bluetooth: hci5: command tx timeout [ 304.867100][ T6132] loop0: detected capacity change from 0 to 1024 [ 304.920057][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.927764][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.935389][ T6080] bridge_slave_1: entered allmulticast mode [ 304.944036][ T6080] bridge_slave_1: entered promiscuous mode [ 304.974675][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.016268][ T6132] ======================================================= [ 305.016268][ T6132] WARNING: The mand mount option has been deprecated and [ 305.016268][ T6132] and is ignored by this kernel. Remove the mand [ 305.016268][ T6132] option from the mount to silence this warning. [ 305.016268][ T6132] ======================================================= [ 305.203282][ T5853] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 305.211803][ T5853] usb 2-1: config 0 has no interface number 0 [ 305.248882][ T5857] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 305.310127][ T5853] usb 2-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 305.319557][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.328373][ T5853] usb 2-1: Product: syz [ 305.332759][ T5853] usb 2-1: Manufacturer: syz [ 305.337623][ T5853] usb 2-1: SerialNumber: syz [ 305.345887][ T6132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.358899][ T6132] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.499213][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 305.517535][ T5853] usb 2-1: config 0 descriptor?? [ 305.628167][ T5857] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 305.637751][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.646051][ T5857] usb 5-1: Product: syz [ 305.650801][ T5857] usb 5-1: Manufacturer: syz [ 305.655689][ T5857] usb 5-1: SerialNumber: syz [ 305.711124][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.780399][ T5857] usb 5-1: config 0 descriptor?? [ 305.839997][ T5857] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 305.892553][ T6132] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 306.096048][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.182209][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.444993][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.513080][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.433522][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.556711][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.565089][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.573080][ T6090] bridge_slave_0: entered allmulticast mode [ 307.582689][ T6090] bridge_slave_0: entered promiscuous mode [ 307.605703][ T6080] team0: Port device team_slave_0 added [ 307.752373][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.899846][ T6080] team0: Port device team_slave_1 added [ 307.913425][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.921578][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.929968][ T6090] bridge_slave_1: entered allmulticast mode [ 307.940311][ T6090] bridge_slave_1: entered promiscuous mode [ 308.016908][ T5857] gspca_sonixj: reg_r err -32 [ 308.058356][ T5857] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 308.665444][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.673684][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.706366][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.742706][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.821168][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.920884][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.928284][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.955142][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.408154][ T5857] usb 5-1: USB disconnect, device number 2 [ 310.168063][ T6090] team0: Port device team_slave_0 added [ 310.821869][ T6090] team0: Port device team_slave_1 added [ 310.848033][ T1104] bridge_slave_1: left allmulticast mode [ 310.854080][ T1104] bridge_slave_1: left promiscuous mode [ 310.861135][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.064341][ T1104] bridge_slave_0: left allmulticast mode [ 311.071339][ T1104] bridge_slave_0: left promiscuous mode [ 311.078353][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.810615][ T6166] loop4: detected capacity change from 0 to 128 [ 311.915280][ T6166] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 312.410083][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.491555][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.533636][ T1104] bond0 (unregistering): Released all slaves [ 312.547949][ T2035] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 312.810158][ T2035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.821064][ T2035] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 312.830647][ T2035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.893253][ T2035] usb 1-1: config 0 descriptor?? [ 312.957134][ T2035] pwc: Askey VC010 type 2 USB webcam detected. [ 312.990314][ T6080] hsr_slave_0: entered promiscuous mode [ 313.003726][ T6080] hsr_slave_1: entered promiscuous mode [ 313.014867][ T6080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.023157][ T6080] Cannot create hsr debugfs directory [ 313.347752][ T2035] pwc: recv_control_msg error -32 req 02 val 2b00 [ 313.377039][ T2035] pwc: recv_control_msg error -32 req 02 val 2700 [ 313.407847][ T2035] pwc: recv_control_msg error -32 req 02 val 2c00 [ 313.443269][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.452030][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.478744][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.499679][ T2035] pwc: recv_control_msg error -32 req 04 val 1000 [ 313.510435][ T2035] pwc: recv_control_msg error -32 req 04 val 1300 [ 313.520697][ T2035] pwc: recv_control_msg error -32 req 04 val 1400 [ 313.555025][ T2035] pwc: recv_control_msg error -32 req 02 val 2000 [ 313.717871][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.725403][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.752557][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.809905][ T2035] pwc: recv_control_msg error -71 req 04 val 1500 [ 313.820331][ T2035] pwc: recv_control_msg error -71 req 02 val 2500 [ 313.836314][ T2035] pwc: recv_control_msg error -71 req 02 val 2400 [ 313.856814][ T2035] pwc: recv_control_msg error -71 req 02 val 2600 [ 313.878053][ T2035] pwc: recv_control_msg error -71 req 02 val 2900 [ 313.900100][ T2035] pwc: recv_control_msg error -71 req 02 val 2800 [ 313.917687][ T2035] pwc: recv_control_msg error -71 req 04 val 1100 [ 313.929209][ T2035] pwc: recv_control_msg error -71 req 04 val 1200 [ 313.961313][ T2035] pwc: Registered as video103. [ 313.970799][ T2035] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 314.069254][ T2035] usb 1-1: USB disconnect, device number 2 [ 315.285766][ T1104] hsr_slave_0: left promiscuous mode [ 315.372050][ T1104] hsr_slave_1: left promiscuous mode [ 315.380605][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.388587][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.511991][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.520061][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.694147][ T1104] veth1_macvtap: left promiscuous mode [ 315.700510][ T1104] veth0_macvtap: left promiscuous mode [ 315.706466][ T1104] veth1_vlan: left promiscuous mode [ 315.712277][ T1104] veth0_vlan: left promiscuous mode [ 317.618212][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 317.672942][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 317.972348][ T5857] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 318.176863][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 318.423053][ T5857] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 318.432634][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.441174][ T5857] usb 1-1: Product: syz [ 318.445618][ T5857] usb 1-1: Manufacturer: syz [ 318.450805][ T5857] usb 1-1: SerialNumber: syz [ 318.510676][ T5857] usb 1-1: config 0 descriptor?? [ 318.548976][ T5857] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 318.791713][ T6090] hsr_slave_0: entered promiscuous mode [ 318.802149][ T6090] hsr_slave_1: entered promiscuous mode [ 318.811224][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.821241][ T6090] Cannot create hsr debugfs directory [ 318.943399][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.956773][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.981889][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.038901][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.052580][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.294099][ T6201] loop4: detected capacity change from 0 to 128 [ 320.401249][ T6201] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 320.429858][ T5857] gspca_sonixj: reg_r err -32 [ 320.468139][ T5857] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 321.128013][ T5806] Bluetooth: hci3: command tx timeout [ 321.582742][ T5857] usb 2-1: USB disconnect, device number 6 [ 321.835996][ T5858] usb 1-1: USB disconnect, device number 3 [ 322.053292][ T3703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.135468][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.326338][ T3703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.383166][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 322.411284][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.543917][ T3703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.738515][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.854695][ T3703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.958644][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.136126][ T6080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.209952][ T5806] Bluetooth: hci3: command tx timeout [ 323.252021][ T6080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.286417][ T6080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.324704][ T6080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.961445][ T3703] bridge_slave_1: left allmulticast mode [ 323.967845][ T3703] bridge_slave_1: left promiscuous mode [ 323.974695][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.154379][ T3703] bridge_slave_0: left allmulticast mode [ 324.160589][ T3703] bridge_slave_0: left promiscuous mode [ 324.167556][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.787595][ T30] audit: type=1326 audit(1750060393.894:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.810097][ T30] audit: type=1326 audit(1750060393.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.832661][ T30] audit: type=1326 audit(1750060393.914:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.858243][ T30] audit: type=1326 audit(1750060393.914:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.881910][ T30] audit: type=1326 audit(1750060393.914:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.904416][ T30] audit: type=1326 audit(1750060393.914:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.926916][ T30] audit: type=1326 audit(1750060393.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.949399][ T30] audit: type=1326 audit(1750060393.924:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.975461][ T30] audit: type=1326 audit(1750060393.924:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 324.999146][ T30] audit: type=1326 audit(1750060393.924:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56a872ab19 code=0x7ffc0000 [ 325.318685][ T5806] Bluetooth: hci3: command tx timeout [ 325.389152][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.458129][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.493546][ T3703] bond0 (unregistering): Released all slaves [ 326.571490][ T3703] hsr_slave_0: left promiscuous mode [ 326.589441][ T3703] hsr_slave_1: left promiscuous mode [ 326.621092][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.629752][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.706513][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.716931][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.029137][ T3703] veth1_macvtap: left promiscuous mode [ 327.035157][ T3703] veth0_macvtap: left promiscuous mode [ 327.041204][ T3703] veth1_vlan: left promiscuous mode [ 327.046667][ T3703] veth0_vlan: left promiscuous mode [ 327.407891][ T5806] Bluetooth: hci3: command tx timeout [ 327.724646][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 327.747721][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 330.682857][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.696861][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.705887][ T6192] bridge_slave_0: entered allmulticast mode [ 330.715831][ T6192] bridge_slave_0: entered promiscuous mode [ 331.150243][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.159322][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.166897][ T6192] bridge_slave_1: entered allmulticast mode [ 331.175525][ T6192] bridge_slave_1: entered promiscuous mode [ 331.231145][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.423685][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.563359][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.646774][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.654437][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.718466][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.760007][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.860760][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.868466][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.179929][ T6249] loop4: detected capacity change from 0 to 164 [ 332.212238][ T6192] team0: Port device team_slave_0 added [ 332.311483][ T6192] team0: Port device team_slave_1 added [ 332.355784][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.388479][ T6249] Unable to read rock-ridge attributes [ 332.810393][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.817742][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.846385][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.037421][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.044873][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.166095][ T6090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.293164][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.301380][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.330524][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.357152][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.364669][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.361404][ T6192] hsr_slave_0: entered promiscuous mode [ 334.372886][ T6192] hsr_slave_1: entered promiscuous mode [ 334.384820][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.392841][ T6192] Cannot create hsr debugfs directory [ 335.065751][ T6270] loop4: detected capacity change from 0 to 128 [ 335.169472][ T6270] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 336.461346][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.495578][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.672298][ T6192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.775101][ T6192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.866151][ T6192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.972463][ T6192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.107787][ T5860] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 337.271549][ T6080] veth0_vlan: entered promiscuous mode [ 337.310225][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 337.388572][ T5860] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 337.398229][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.406515][ T5860] usb 1-1: Product: syz [ 337.412046][ T5860] usb 1-1: Manufacturer: syz [ 337.416917][ T5860] usb 1-1: SerialNumber: syz [ 337.458284][ T6080] veth1_vlan: entered promiscuous mode [ 337.604598][ T5860] usb 1-1: config 0 descriptor?? [ 337.678966][ T5860] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 337.984316][ T6080] veth0_macvtap: entered promiscuous mode [ 338.104150][ T6080] veth1_macvtap: entered promiscuous mode [ 338.399596][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.533799][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.686550][ T6080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.696711][ T6080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.706095][ T6080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.715300][ T6080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.822816][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.986812][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.113752][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.121506][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.280612][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.288356][ T4098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.618726][ T5860] gspca_sonixj: reg_r err -32 [ 339.690739][ T5860] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 339.966432][ T6090] veth0_vlan: entered promiscuous mode [ 340.078550][ T6090] veth1_vlan: entered promiscuous mode [ 340.575248][ T6090] veth0_macvtap: entered promiscuous mode [ 340.617921][ T6090] veth1_macvtap: entered promiscuous mode [ 340.834617][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.923095][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.955150][ T42] usb 1-1: USB disconnect, device number 4 [ 341.101118][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.110878][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.120616][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.130740][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.228346][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.230957][ T6353] capability: warning: `syz.0.74' uses 32-bit capabilities (legacy support in use) [ 345.896910][ T6364] kvm: kvm [6359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 346.057075][ T6364] kvm: kvm [6359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 346.171796][ T6364] kvm: kvm [6359]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 346.890818][ T6192] veth0_vlan: entered promiscuous mode [ 346.956903][ T6192] veth1_vlan: entered promiscuous mode [ 347.335343][ T6192] veth0_macvtap: entered promiscuous mode [ 347.456226][ T6192] veth1_macvtap: entered promiscuous mode [ 347.677898][ T5777] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 347.733439][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.823063][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.926807][ T6192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.936912][ T6192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.946582][ T6192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.955788][ T6192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.975062][ T5777] usb 5-1: Using ep0 maxpacket: 8 [ 348.024376][ T5777] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 348.034633][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.043260][ T5777] usb 5-1: Product: syz [ 348.047892][ T5777] usb 5-1: Manufacturer: syz [ 348.052761][ T5777] usb 5-1: SerialNumber: syz [ 348.172179][ T5777] usb 5-1: config 0 descriptor?? [ 348.211055][ T5777] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 349.325528][ T4069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.335814][ T4069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.648824][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.656953][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.152855][ T5777] gspca_sonixj: reg_r err -32 [ 350.209505][ T5777] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 350.408605][ T6410] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.460472][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 350.487708][ T6410] syz_tun: entered promiscuous mode [ 350.502674][ T6410] syz_tun: left promiscuous mode [ 350.904598][ T3884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.912888][ T3884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.320609][ T3884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.329042][ T3884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.552698][ T5858] usb 5-1: USB disconnect, device number 3 [ 352.599231][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.608750][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.437641][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 356.778678][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 356.816217][ T5858] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 356.826049][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.834550][ T5858] usb 1-1: Product: syz [ 356.839306][ T5858] usb 1-1: Manufacturer: syz [ 356.844162][ T5858] usb 1-1: SerialNumber: syz [ 357.003271][ T5858] usb 1-1: config 0 descriptor?? [ 357.097993][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 359.079334][ T5858] gspca_sonixj: reg_r err -32 [ 359.153935][ T5858] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 359.375315][ T4769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.384055][ T4769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.609191][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.617675][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.249667][ T5777] usb 1-1: USB disconnect, device number 5 [ 360.886975][ T6525] loop3: detected capacity change from 0 to 128 [ 361.069162][ T6525] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 363.465615][ T5777] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 363.707829][ T5777] usb 4-1: Using ep0 maxpacket: 8 [ 363.780960][ T5777] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 363.790566][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.799259][ T5777] usb 4-1: Product: syz [ 363.803707][ T5777] usb 4-1: Manufacturer: syz [ 363.808840][ T5777] usb 4-1: SerialNumber: syz [ 363.936873][ T5777] usb 4-1: config 0 descriptor?? [ 364.080443][ T5777] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 365.924033][ T5777] gspca_sonixj: reg_r err -32 [ 365.969800][ T5777] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 367.309401][ T5777] usb 4-1: USB disconnect, device number 2 [ 369.597746][ T5860] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 369.837588][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 369.997890][ T5860] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 370.007439][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.020201][ T5860] usb 1-1: Product: syz [ 370.024661][ T5860] usb 1-1: Manufacturer: syz [ 370.031227][ T5860] usb 1-1: SerialNumber: syz [ 370.148835][ T5860] usb 1-1: config 0 descriptor?? [ 370.185394][ T5860] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 372.133491][ T5860] gspca_sonixj: reg_r err -32 [ 372.188047][ T5860] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 373.471254][ T5860] usb 1-1: USB disconnect, device number 6 [ 374.091514][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 374.091596][ T30] audit: type=1804 audit(1750060443.214:166): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.166" name="/newroot/40/file0" dev="tmpfs" ino=220 res=1 errno=0 [ 374.368024][ T6691] loop5: detected capacity change from 0 to 1024 [ 374.784556][ T6691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.798178][ T6691] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.073695][ T6691] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 375.128105][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 375.139041][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 375.142337][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 375.154750][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 375.641535][ T6090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.094592][ T6713] Zero length message leads to an empty skb [ 376.767913][ T5858] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 376.981803][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 377.058024][ T5858] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 377.067980][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.076309][ T5858] usb 7-1: Product: syz [ 377.085214][ T5858] usb 7-1: Manufacturer: syz [ 377.091553][ T5858] usb 7-1: SerialNumber: syz [ 377.148744][ T5858] usb 7-1: config 0 descriptor?? [ 377.209545][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 378.830377][ T6740] loop5: detected capacity change from 0 to 1024 [ 378.843730][ T4769] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 379.035467][ T6740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.049686][ T6740] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.150192][ T5858] gspca_sonixj: reg_r err -32 [ 379.224142][ T6740] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 379.226135][ T5858] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 379.886073][ T6090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.932118][ T6760] netlink: 96 bytes leftover after parsing attributes in process `syz.3.187'. [ 380.642591][ T5858] usb 7-1: USB disconnect, device number 2 [ 380.699250][ T6772] ptrace attach of "./syz-executor exec"[5805] was attempted by "./syz-executor exec"[6772] [ 381.037694][ T6775] syz.3.192 uses obsolete (PF_INET,SOCK_PACKET) [ 382.718281][ T6797] loop0: detected capacity change from 0 to 1024 [ 383.463231][ T6797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.478467][ T6797] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.792980][ T6804] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 384.301395][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 384.335654][ T6811] warning: `syz.4.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 384.538254][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.578898][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 384.676471][ T42] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 384.686294][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.694772][ T42] usb 6-1: Product: syz [ 384.699276][ T42] usb 6-1: Manufacturer: syz [ 384.704208][ T42] usb 6-1: SerialNumber: syz [ 385.014520][ T42] usb 6-1: config 0 descriptor?? [ 385.103171][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 387.168222][ T42] gspca_sonixj: reg_r err -32 [ 387.223275][ T42] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 388.535129][ T42] usb 6-1: USB disconnect, device number 2 [ 388.665291][ T6848] loop6: detected capacity change from 0 to 1024 [ 388.849978][ T6848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.871829][ T6848] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.078640][ T6848] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 390.294149][ T6192] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.315566][ T6866] Bluetooth: MGMT ver 1.23 [ 390.355450][ T6865] nbd: couldn't find device at index -1140850688 [ 393.272768][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 393.468306][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 393.656279][ T42] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 393.666275][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.686763][ T42] usb 6-1: Product: syz [ 393.692988][ T42] usb 6-1: Manufacturer: syz [ 393.697995][ T42] usb 6-1: SerialNumber: syz [ 393.829921][ T42] usb 6-1: config 0 descriptor?? [ 393.954299][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 394.394165][ T6901] loop0: detected capacity change from 0 to 1024 [ 394.579984][ T6901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.599295][ T6901] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.855855][ T6901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 395.609494][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.738227][ T42] gspca_sonixj: reg_r err -32 [ 395.788829][ T42] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 396.261558][ T6922] 9pnet_virtio: no channels available for device syz [ 397.205691][ T42] usb 6-1: USB disconnect, device number 3 [ 398.673290][ T6953] loop0: detected capacity change from 0 to 8 [ 398.717180][ T6953] SQUASHFS error: Failed to read block 0x260685: -5 [ 398.730642][ T6953] SQUASHFS error: Unable to read metadata cache entry [260685] [ 398.738751][ T6953] SQUASHFS error: Unable to read directory block [260685:0] [ 400.388402][ T5858] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 400.587631][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 400.677688][ T5858] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 400.687208][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.695842][ T5858] usb 6-1: Product: syz [ 400.700461][ T5858] usb 6-1: Manufacturer: syz [ 400.705328][ T5858] usb 6-1: SerialNumber: syz [ 400.764060][ T5858] usb 6-1: config 0 descriptor?? [ 400.817082][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 400.847642][ T42] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 401.075359][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 401.153446][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 401.161616][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 401.179151][ T42] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.193641][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.205365][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 401.509278][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 401.517908][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 401.529735][ T42] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.542007][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.557942][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 401.770643][ T5858] gspca_sonixj: reg_r err -32 [ 401.776019][ T5858] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 401.999348][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 402.007102][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 402.020652][ T42] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.032869][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 402.044464][ T42] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 402.204195][ T42] usb 7-1: string descriptor 0 read error: -22 [ 402.211585][ T42] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 402.221346][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.357556][ T42] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 402.563657][ T5858] usb 7-1: USB disconnect, device number 3 [ 402.722719][ T7004] loop3: detected capacity change from 0 to 8 [ 402.769459][ T7004] SQUASHFS error: Failed to read block 0x260685: -5 [ 402.776263][ T7004] SQUASHFS error: Unable to read metadata cache entry [260685] [ 402.787704][ T7004] SQUASHFS error: Unable to read directory block [260685:0] [ 403.512600][ T5858] usb 6-1: USB disconnect, device number 4 [ 405.086310][ T7032] loop2: detected capacity change from 0 to 7 [ 405.236591][ T7032] Dev loop2: unable to read RDB block 7 [ 405.248816][ T7032] loop2: unable to read partition table [ 405.303580][ T7032] loop2: partition table beyond EOD, truncated [ 405.310599][ T7032] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.980749][ T7047] loop0: detected capacity change from 0 to 8 [ 406.248643][ T7047] SQUASHFS error: Failed to read block 0x260685: -5 [ 406.255456][ T7047] SQUASHFS error: Unable to read metadata cache entry [260685] [ 406.268109][ T7047] SQUASHFS error: Unable to read directory block [260685:0] [ 406.767758][ T5858] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 407.001180][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 407.063658][ T5858] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 407.073412][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.086548][ T5858] usb 7-1: Product: syz [ 407.092684][ T5858] usb 7-1: Manufacturer: syz [ 407.097834][ T5858] usb 7-1: SerialNumber: syz [ 407.231786][ T5858] usb 7-1: config 0 descriptor?? [ 407.275670][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 408.113171][ T5858] gspca_sonixj: reg_r err -32 [ 408.120067][ T5858] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 408.818866][ T5806] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 409.945239][ T5858] usb 7-1: USB disconnect, device number 4 [ 410.589235][ T7103] loop3: detected capacity change from 0 to 1024 [ 410.982676][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.998446][ T7103] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.839811][ T6080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.076604][ T7137] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.149420][ T5858] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 413.274449][ T7137] kvm: pic: non byte read [ 413.418124][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 413.557746][ T5858] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 413.567166][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.575661][ T5858] usb 6-1: Product: syz [ 413.580340][ T5858] usb 6-1: Manufacturer: syz [ 413.585200][ T5858] usb 6-1: SerialNumber: syz [ 413.810508][ T5858] usb 6-1: config 0 descriptor?? [ 413.836494][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 414.036970][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.047977][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.697960][ T5858] gspca_sonixj: reg_r err -32 [ 414.703203][ T5858] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 415.157590][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 415.312411][ T7165] loop4: detected capacity change from 0 to 1024 [ 415.421538][ T42] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 415.430549][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.551772][ T42] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 415.562376][ T42] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 415.570841][ T42] usb 4-1: Manufacturer: syz [ 415.618161][ T42] usb 4-1: config 0 descriptor?? [ 415.627098][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.640213][ T7165] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.744365][ T7165] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 416.131896][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.239935][ T42] rc_core: IR keymap rc-hauppauge not found [ 416.246242][ T42] Registered IR keymap rc-empty [ 416.258152][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 416.273546][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 416.338301][ T5777] usb 6-1: USB disconnect, device number 5 [ 416.681877][ T42] usb 4-1: USB disconnect, device number 3 [ 417.530659][ T7194] syzkaller1: entered promiscuous mode [ 417.538328][ T7194] syzkaller1: entered allmulticast mode [ 419.353589][ T7217] loop4: detected capacity change from 0 to 1024 [ 419.550053][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.562864][ T7217] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.667836][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 419.825970][ T7217] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 419.896497][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 420.078788][ T5858] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 420.092706][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.102699][ T5858] usb 4-1: Product: syz [ 420.107148][ T5858] usb 4-1: Manufacturer: syz [ 420.112237][ T5858] usb 4-1: SerialNumber: syz [ 420.150811][ T5858] usb 4-1: config 0 descriptor?? [ 420.186370][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 420.607141][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.208781][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 421.222014][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 422.146977][ T5858] gspca_sonixj: reg_r err -32 [ 422.152155][ T5858] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 423.391721][ T50] Bluetooth: hci5: Malformed Event: 0x13 [ 423.411346][ T5858] usb 4-1: USB disconnect, device number 4 [ 426.048342][ T7280] autofs4:pid:7280:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(132694.524047), cmd(0xc018937b) [ 426.063709][ T7280] autofs4:pid:7280:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 428.479360][ T7286] netlink: 128 bytes leftover after parsing attributes in process `syz.0.339'. [ 428.717803][ T5858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 428.940092][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 429.009346][ T7296] random: crng reseeded on system resumption [ 429.028659][ T5858] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 429.038472][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.046821][ T5858] usb 4-1: Product: syz [ 429.051396][ T5858] usb 4-1: Manufacturer: syz [ 429.056273][ T5858] usb 4-1: SerialNumber: syz [ 429.176780][ T5858] usb 4-1: config 0 descriptor?? [ 429.267175][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 430.118270][ T5858] gspca_sonixj: reg_r err -32 [ 430.129912][ T5858] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 431.066209][ T7313] ===================================================== [ 431.073846][ T7313] BUG: KMSAN: uninit-value in eth_type_trans+0x7af/0x9a0 [ 431.081380][ T7313] eth_type_trans+0x7af/0x9a0 [ 431.086370][ T7313] bpf_prog_run_generic_xdp+0x12a0/0x1ff0 [ 431.092533][ T7313] do_xdp_generic+0xd52/0x1690 [ 431.097680][ T7313] tun_get_user+0x447a/0x6b40 [ 431.102663][ T7313] tun_chr_write_iter+0x3e9/0x5c0 [ 431.108157][ T7313] vfs_write+0xb4b/0x1580 [ 431.112836][ T7313] __x64_sys_write+0x1fb/0x4d0 [ 431.118118][ T7313] x64_sys_call+0x38c3/0x3db0 [ 431.123053][ T7313] do_syscall_64+0xd9/0x210 [ 431.127929][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.134075][ T7313] [ 431.136526][ T7313] Uninit was stored to memory at: [ 431.142049][ T7313] pskb_expand_head+0x310/0x1610 [ 431.147410][ T7313] do_xdp_generic+0xa79/0x1690 [ 431.152404][ T7313] tun_get_user+0x447a/0x6b40 [ 431.157482][ T7313] tun_chr_write_iter+0x3e9/0x5c0 [ 431.162837][ T7313] vfs_write+0xb4b/0x1580 [ 431.167617][ T7313] __x64_sys_write+0x1fb/0x4d0 [ 431.172640][ T7313] x64_sys_call+0x38c3/0x3db0 [ 431.177798][ T7313] do_syscall_64+0xd9/0x210 [ 431.182517][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.188776][ T7313] [ 431.191230][ T7313] Uninit was created at: [ 431.195846][ T7313] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 431.202743][ T7313] kmalloc_reserve+0x22f/0x4b0 [ 431.207864][ T7313] __alloc_skb+0x347/0x7d0 [ 431.212515][ T7313] alloc_skb_with_frags+0xc5/0xa60 [ 431.218012][ T7313] sock_alloc_send_pskb+0xad8/0xc70 [ 431.223465][ T7313] tun_get_user+0x1019/0x6b40 [ 431.228612][ T7313] tun_chr_write_iter+0x3e9/0x5c0 [ 431.233876][ T7313] vfs_write+0xb4b/0x1580 [ 431.238667][ T7313] __x64_sys_write+0x1fb/0x4d0 [ 431.243707][ T7313] x64_sys_call+0x38c3/0x3db0 [ 431.248869][ T7313] do_syscall_64+0xd9/0x210 [ 431.253600][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.259897][ T7313] [ 431.262390][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.4.346 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 431.274814][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.285238][ T7313] ===================================================== [ 431.292468][ T7313] Disabling lock debugging due to kernel taint [ 431.299046][ T7313] Kernel panic - not syncing: kmsan.panic set ... [ 431.305666][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.4.346 Tainted: G B 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 431.319484][ T7313] Tainted: [B]=BAD_PAGE [ 431.323786][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.334143][ T7313] Call Trace: [ 431.337575][ T7313] [ 431.340663][ T7313] __dump_stack+0x26/0x30 [ 431.345232][ T7313] dump_stack_lvl+0x53/0x270 [ 431.350073][ T7313] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.356163][ T7313] dump_stack+0x1e/0x25 [ 431.360569][ T7313] panic+0x4bd/0xd50 [ 431.364744][ T7313] kmsan_report+0x31c/0x320 [ 431.369542][ T7313] ? do_syscall_64+0xd9/0x210 [ 431.374452][ T7313] ? __msan_warning+0x1b/0x30 [ 431.379372][ T7313] ? eth_type_trans+0x7af/0x9a0 [ 431.384514][ T7313] ? bpf_prog_run_generic_xdp+0x12a0/0x1ff0 [ 431.390672][ T7313] ? do_xdp_generic+0xd52/0x1690 [ 431.395843][ T7313] ? tun_get_user+0x447a/0x6b40 [ 431.400970][ T7313] ? tun_chr_write_iter+0x3e9/0x5c0 [ 431.406451][ T7313] ? vfs_write+0xb4b/0x1580 [ 431.411234][ T7313] ? __x64_sys_write+0x1fb/0x4d0 [ 431.416485][ T7313] ? x64_sys_call+0x38c3/0x3db0 [ 431.421636][ T7313] ? do_syscall_64+0xd9/0x210 [ 431.426549][ T7313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.432872][ T7313] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.439003][ T7313] ? kmsan_get_metadata+0xfb/0x160 [ 431.444425][ T7313] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.451060][ T7313] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.457434][ T7313] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 431.463588][ T7313] ? stack_depot_save_flags+0x60f/0x7b0 [ 431.469404][ T7313] ? kmsan_get_metadata+0xfb/0x160 [ 431.474830][ T7313] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.481466][ T7313] ? kmsan_get_metadata+0xfb/0x160 [ 431.486903][ T7313] __msan_warning+0x1b/0x30 [ 431.491687][ T7313] eth_type_trans+0x7af/0x9a0 [ 431.496673][ T7313] bpf_prog_run_generic_xdp+0x12a0/0x1ff0 [ 431.502737][ T7313] do_xdp_generic+0xd52/0x1690 [ 431.507854][ T7313] ? tun_get_user+0x3fd1/0x6b40 [ 431.512971][ T7313] ? filter_irq_stacks+0x49/0x190 [ 431.518291][ T7313] ? tun_get_user+0x43f5/0x6b40 [ 431.523434][ T7313] tun_get_user+0x447a/0x6b40 [ 431.528406][ T7313] ? stack_depot_save_flags+0x35/0x7b0 [ 431.534144][ T7313] ? __rcu_read_unlock+0x6d/0xd0 [ 431.539335][ T7313] ? kmsan_get_metadata+0xfb/0x160 [ 431.544749][ T7313] ? kmsan_get_metadata+0xfb/0x160 [ 431.550149][ T7313] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.556801][ T7313] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.563210][ T7313] tun_chr_write_iter+0x3e9/0x5c0 [ 431.568505][ T7313] vfs_write+0xb4b/0x1580 [ 431.573137][ T7313] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 431.578943][ T7313] __x64_sys_write+0x1fb/0x4d0 [ 431.584009][ T7313] x64_sys_call+0x38c3/0x3db0 [ 431.588950][ T7313] do_syscall_64+0xd9/0x210 [ 431.593679][ T7313] ? irqentry_exit+0x16/0x60 [ 431.598526][ T7313] ? clear_bhb_loop+0x40/0x90 [ 431.603444][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.609593][ T7313] RIP: 0033:0x7f56a878d3df [ 431.614217][ T7313] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 431.634247][ T7313] RSP: 002b:00007f56a9576000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 431.642880][ T7313] RAX: ffffffffffffffda RBX: 00007f56a89b5fa0 RCX: 00007f56a878d3df [ 431.651047][ T7313] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 00000000000000c8 [ 431.659191][ T7313] RBP: 00007f56a8810b39 R08: 0000000000000000 R09: 0000000000000000 [ 431.667340][ T7313] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 431.675496][ T7313] R13: 0000000000000000 R14: 00007f56a89b5fa0 R15: 00007ffe001ed6a8 [ 431.683680][ T7313] [ 431.687200][ T7313] Kernel Offset: disabled [ 431.691639][ T7313] Rebooting in 86400 seconds..